Systems and methods for security and control of internet of things and zeroconf devices using cloud services

1. A method of monitoring and controlling Internet of Things (IOT) and ZeroConf devices using a cloud-based security system, the method comprising:

receiving fingerprints of the IOT and ZeroConf devices and data related to operation from a plurality of user devices;

receiving updates related to the IOT and ZeroConf devices, configuration thereof, and proper operation thereof;

determining security risk of the IOT and ZeroConf devices based on the fingerprints, the data related to operation, and the updates; and

providing the security risk to the plurality of user devices and causing one or more policy-based actions to be performed based on the security risk.

2. The method of claim 1 , wherein each of the plurality of user devices execute an application which listens on a local network for the IOT and ZeroConf devices and determines the fingerprints and the data related to operation.

3. The method of claim 2 , wherein the application listens in a promiscuous mode on the local network and periodically communicates the fingerprint and data related to operation to the cloud-based security system.

4. The method of claim 2 , wherein the one or more policy-based actions are performed through the application.

5. The method of claim 2 , wherein the application maintains properties of the IOT and ZeroConf devices on the local network and periodically checks for changes in the properties.

6. The method of claim 2 , wherein the one or more policy-based actions comprise blocking services of the IOT and ZeroConf devices and/or ports on the local network or user's device, via the application.

7. The method of claim 1 , wherein the security risk is determined based on a comparison and weighted score of the fingerprints and the data related to operation compared to the updates.

8. The method of claim 1 , wherein the security risk is based in part on whether the IOT and ZeroConf devices utilize factory defined login credentials and/or leak sensitive user data over unencrypted channels.

9. The method of claim 1 , wherein the security risk is based in part on whether the IOT and ZeroConf devices exhibit traffic spikes and/or communicate with any known malicious or botnet servers.

10. The method of claim 1 , wherein the one or more policy-based actions comprise blocking services associated with the IOT and ZeroConf devices based on an enterprise's policy.

11. A cloud node in a cloud-based security system configured to monitor and control Internet of Things (IOT) and ZeroConf devices, the cloud node comprising:

a network interface;

a processor communicatively coupled to the network interface; and

memory storing instructions that, when executed, cause the processor to:

receive fingerprints of the IOT and ZeroConf devices and data related to operation from a plurality of user devices;

receive updates related to the IOT and ZeroConf devices, configuration thereof, and proper operation thereof;

determine security risk of the IOT and ZeroConf devices based on the fingerprints, the data related to operation, and the updates; and

provide the security risk to the plurality of user devices and cause one or more policy-based actions to be performed based on the security risk.

12. The cloud node of claim 11 , wherein each of the plurality of user devices execute an application which listens on a local network for the IOT and ZeroConf devices and determines the fingerprints and the data related to operation.

13. The cloud node of claim 12 , wherein the application listens in a promiscuous mode on the local network and periodically communicates the fingerprint and data related to operation to the cloud-based security system.

14. The cloud node of claim 12 , wherein the one or more policy-based actions are performed through the application.

15. The cloud node of claim 12 , wherein the application maintains properties of the IOT and ZeroConf devices on the local network and periodically checks for changes in the properties.

16. The cloud node of claim 12 , wherein the one or more policy-based actions comprise blocking services of the IOT and ZeroConf devices and/or ports on the local network or user's device, via the application.

17. The cloud node of claim 11 , wherein the security risk is determined based on a comparison and weighted score of the fingerprints and the data related to operation compared to the updates.

18. The cloud node of claim 11 , wherein the security risk is based in part on whether the IOT and ZeroConf devices utilize factory defined login credentials and/or leak sensitive user data over unencrypted channels.

19. The cloud node of claim 11 , wherein the one or more policy-based actions comprise blocking services associated with the IOT and ZeroConf devices based on an enterprise's policy.

20. A method of monitoring and controlling Internet of Things (IOT) and ZeroConf devices using an application executed on a processing device and a monitoring service, the method comprising:

executing an application on the processing device;

listening to a local network to detect the IOT and ZeroConf and associated services;

determining fingerprints of the IOT and ZeroConf devices based on the listening;

providing the fingerprints and data related to operation to the monitoring service;

receiving a security risk of the IOT and ZeroConf devices from the monitoring service based on the fingerprints and the data related to operation; and

providing the security risk to a user and performing one or more policy-based actions based on the security risk.