Draft Security Feature Recos of IOT

Good to see this moving forward.  Essential.

NIST Releases Draft Security Feature Recommendations for IoT Devices 
National Institute of Standards and Technology
By Chad Boutin

The U.S. National Institute of Standards and Technology (NIST) has issued a "Core Baseline" guide on voluntary recommended cybersecurity for Internet-of-Things (IoT) devices. Recommendations include using in-network-capable devices, and the guide's precepts are applicable to any Internet-connected device. NIST's Mike Fagan said securing IoT devices requires the participation of both device manufacturers and users. The Core Baseline directs IoT devices to be self-identifying, via a serial number and/or a unique address used when connecting to networks; authorized users also should be able to reconfigure device software and firmware, which is securely updatable. Devices also should have a clear explanation of their data-security capabilities, limit access to local and network interfaces, and support logging of cybersecurity events accessible to owners.  ... "