Practical Internet of Things Security - Second Edition

Network segmentation and network access controls

One strategy used especially in health care organizations is to segment IoT devices into their own Virtual Local Area Network (VLAN). This can lead to high overhead in terms of management costs. Alternatively, there are solutions that enable automated network segmentation. 

For example, the Blue Ridge Network Autonomous Network Segmentation (ANS) offers claims to be able to segment autonomously Ethernet-connected IoT devices to safeguard trusted networks from potentially compromised IoT devices. A product from Forescout can automatically discover IoT devices and assign those devices to secure VLAN segments. The tool can then be used to also monitor the device behavior and report on suspicious ...