01712nas a2200181 4500000000100000008004100001653002900042653002400071653002300095653002700118653003300145100001800178700002200196245003800218300000900256490000700265520125800272 2016 d10aCritical infrastructures10aIndustrial Internet10aInternet of Things10amachine communications10asecurity implications of IoT1 aSean Costigan1 aGustav Lindström00aPolicy and the Internet of Things a9-180 v153 a

Cybersecurity has steadily crept to the top of the national security agenda. Simultaneously, a merger of the physical and virtual worlds is noticeably underway. A confluence of technologies has come together to make this possible under the rubric known as the Internet of Things (IoT). This merger will bring sensors and computing devices totaling in the billions to connect objects together in a network that does not require human intervention, along with which will come much vaunted benefits, knowable risks, uncertainties and considerable security dilemmas. Using the past as a predictor of future behavior, a vast increase in hackable devices will create equally vast vulnerabilities that will now touch the physical world. Yet the IoT will also present opportunities that are just now being imagined, likely making the Internet revolution seem small by comparison. While technological growth often appears to outpace policy, government retains the power to convene and ultimately to regulate. This article examines why policymakers should care about the IoT, the significant trends for the next five to ten years, and likely security implications stemming from those trends. The article finalizes with an overview of policy considerations.