5.1 Internet of Things (IoT)

What is IoT?

The Internet of Things (IoT) is a network of physical objects — called 'things' — embedded with sensors, software, and communication technologies that enable them to collect and exchange data with other devices and systems over the internet.

Examples include smart thermostats, wearable fitness trackers, industrial machinery sensors, smart traffic lights, and connected home appliances.

---

Components of an IoT System

An IoT system has four main components:

Sensors vs. Actuators

• A Sensor detects a physical parameter (temperature, motion, light) and converts it into a digital signal.
• An Actuator receives a command from the control system and converts it into a physical action — e.g., opening a valve, switching on a motor, or adjusting a thermostat.

---

Edge Computing in IoT

Edge computing means processing data near the source (at the 'edge' of the network) rather than sending everything to a centralised cloud.

Benefits:

• Reduced latency (faster response time)
• Lower bandwidth usage
• Improved reliability when internet connectivity is intermittent

This is especially important in Industrial IoT (IIoT) where real-time decisions (e.g., stopping a machine to prevent an accident) cannot tolerate delays.

---

IoT Application: Smart Grid

A Smart Grid is an electrical distribution network that uses IoT sensors and two-way communication to:

• Monitor energy consumption in real time
• Detect and respond to faults automatically
• Improve efficiency and reduce waste
• Balance supply and demand dynamically

---

Usability, Security, and Accessibility of IoT Devices

IoT devices must balance three key properties:

Usability

Devices should be easy to set up, use, and maintain. However, making devices too easy to use (e.g., no password required) often reduces security.

Security

IoT devices face unique security challenges:

• Weak authentication — many devices ship with hardcoded default passwords
• Limited processing power — cannot run heavy encryption algorithms
• Large attack surface — billions of connected devices create many entry points
• Botnets — compromised IoT devices can be recruited into large-scale attacks (e.g., Mirai botnet)

Accessibility

Devices must be accessible to users with different abilities and in areas with varying connectivity (e.g., rural Pakistan with limited broadband).

---

The CIA Triad in IoT Security

The CIA Triad is the foundational framework for evaluating cybersecurity:

---

Usability vs. Security Tradeoffs in IoT

A key challenge in IoT design is the tradeoff between usability and security:

• Adding multi-factor authentication (MFA) improves security but reduces ease of use.
• Automatic firmware updates improve security but may disrupt device operation.
• Data collection improves functionality but raises privacy concerns.
• Cost constraints on cheap IoT devices often mean weaker security implementations.

Cybersecurity Measures for IoT

1. Strong, unique passwords — avoid hardcoded or default credentials
2. Regular firmware updates — patch known vulnerabilities
3. Network segmentation — isolate IoT devices on a separate network
4. End-to-end encryption — protect data in transit
5. Device authentication — verify device identity before allowing network access
6. Monitoring and anomaly detection — detect unusual behaviour early

---

Designing IoT Applications for Pakistan

IoT has significant potential for Pakistan across multiple sectors:

• Agriculture — soil moisture sensors and automated irrigation to address water scarcity
• Healthcare — remote patient monitoring in rural areas with limited hospital access
• Energy — Smart Meters and Smart Grids to reduce electricity theft and load-shedding
• Disaster Management — flood sensors along rivers (Indus, Jhelum) for early warning systems
• Smart Cities — intelligent traffic management and waste collection in Lahore, Karachi, Islamabad