Hi Maciej,
I fully agree to the 5 dark sides mentioned, however I tend to disagree that the suggested solutions will be sufficient to reach the goal of a properly protected IoT.

Let me explain why I believe we will fail if we proceed as described:

• As you stated, IoT is extremely complex in all directions – various providers, technologies, infrastructures, and an enormous number of connected devices. You’re absolutely correct that we need new solutions and standards which offer true security and privacy by design - BUT establishing new standards by bodies like IETF, IEEE, ODVA, ISA, FTC, NIST etc. currently takes far too long, involves various lobbies with different approaches/solutions in mind and is expensive (so mostly the big players can afford it). This leads to the problem that only incremental steps are taken, but the needed paradigm shift won’t take place

• A paradigm shift is needed, as today’s layered security models feel like solutions from the middle ages – building protection layers around the data. Inflexible, not properly scalable and based on technologies invented decades ago. Unfortunately the IoT is completely different, heterogenous, highly distributed and connected – so where do you build your protective barriers?

To be able to cover the IoT’s security demands we need a distributed solution which protects the data wherever it is created, which integrates the protection within the data (so no additional security layers are required), which allows to freely transmit the data wherever desired/needed, which replaces access control by true data control, and is scalable enough to run on any kind of device, offering true data security and privacy by design.

Even though I agree to the issues you mentioned about proprietary solutions, I believe that one of the big players has to take the frontrunner role and implement such a game-changing solution in his eco-system to prove that only such a major step can prevent from more and more IoT related security issues (and resulting breaches). This solution will lead to such a massive competitive advantage that the market will decide how we protect our (IoT) data in the future…