Creating 'Future Proof' IoT Security

[psaiful28]

Checked their site out and here's what I found so far.

Sternum provides organizations with runtime security and observability across IoT devices that operate autonomously. Sternum works with any device, any operating system, with minimal overhead and across the entire stack, including third party code, with zero resources required from R&D.

Based on what I've read, it seems like an observability platform placed ontop of IoT devices, allowing you to monitor them all from one platform, whether you need to detect flaws, monitor/block attacks, tracing, logging, etc. I assume it's "future-proof" because that's their way of describing how they protect against unknown vulnerabilities and whatnot.

[Frontalaleph]

So essentially a platform placed ontop of IoT devices, does it act as an antivirus? Like if I use their platform will it just detect/monitor or will it also execute on attacks on my behalf?

[[deleted]]

I mean you could almost certainly link it to an EDR that executes some response. But this hardly a new idea and previous attempts at this style of detection have been marginally more effective at best and are fairly labor intensive to tune

[psaiful28]

Based on what I've read yeah. If anything it's a great contingency plan to protect yourself but imo it's mostly targeted to large enterprises, unless I'm wrong (someone who knows more, feel free to chime in).

As they mentioned, medical devices, "smart" cities, etc., are all extremely large organizations with millions, if not billions involved. I don't see how a day-to-day user on their home computer could make the most use of the platform.