CREDENTIAL-CHANGING PLUGIN FOR IOT DEVICES
A process for management of Internet-of-Things (IoT) devices includes a management system for identifying, interrogating, and updating devices connected to one or more networks. The management system can include a data store for storing various data related to the devices and the various processes of the management system. The management system can include a controller for executing processes such as interrogation processes, firmware change processes, credential change processes, and other processes. The controller can determine versions of firmware and other configuration properties of a device and generate various profiles for updating the firmware and other configuration properties. The controller can determine upgrade paths for updating the firmware and other configuration properties from a first version to a second version, the upgrade paths including one or more intermediary versions for facilitating the upgrade path. The management system can update devices individually, on a device family basis, or on a system-wide basis.
1 . A system comprising:
a data store comprising data describing one or more internet of things (IoT) devices of a plurality of IoT device families; and
at least one computing device comprising a processor and in communication with the data store, the at least one computing device being configured to at least:
receive a request to perform a system-wide configuration update;
interrogate at least one IoT device of at least one of the plurality of IoT device families to determine at least one IoT device configuration corresponding to the at least one of the plurality of IoT device families;
determine, based on the request and the at least IoT device configuration, one or more configuration settings of the at least one of the plurality of IoT device families, wherein the one or more configuration settings correspond to the system-wide configuration update; and
modify, based on the request, the one or more configuration settings for one or more IoT devices of the at least one of the plurality of IoT device families.
2 . The system of claim 1 , wherein the request to perform the system-wide configuration update is received from a privileged asset management (PAM) system, generated automatically based on a predetermined schedule, or both.
3 . The system of claim 1 , wherein the at least one computing device is further configured to analyze the at least one IoT device configuration by applying one or more rules associated with the at least one of the plurality of IoT device families.
4 . The system of claim 1 , wherein interrogating the at least one IoT device comprises accessing a configuration setting using an application programming interface associated with the at least one of the plurality of IoT device families of the at least one IoT device.
5 . The system of claim 1 , wherein interrogating the at least one IoT device comprises identifying one or more open network ports of the at least one IoT device.
6 . The system of claim 1 , wherein determining the one or more configuration settings of the at least one of the plurality of IoT device families comprises retrieving a configuration policy associated with the at least one of the plurality of IoT device families from the data store.
7 . The system of claim 1 , wherein modifying the one or more configuration settings comprises modifying the one or more configuration settings via at least one connection selected from a group consisting of: a telnet connection, an HTTP connection, a proprietary socket connection, and an FTP connection.
8 . The system of claim 1 , wherein:
the at least one computing device is further configured to analyze the at least one IoT device configuration to identify at least one security vulnerability, and
modifying the one or more configuration settings comprises disabling a feature associated with the at least one identified security vulnerability.
9 . The system of claim 8 , wherein the feature associated with the at least one identified security vulnerability comprises a wireless connectivity function, a network port, or both.
10 . The system of claim 1 , wherein modifying the one or more configuration settings comprises applying a configuration change profile associated with the at least one of the plurality of IoT device families of the one or more IoT devices.
11 . A method comprising:
receiving a request to perform a system-wide configuration update;
interrogating at least one IoT device of at least one of the plurality of IoT device families to determine at least one IoT device configuration corresponding to the at least one of the plurality of IoT device families;
determining, based on the request and the at least IoT device configuration, one or more configuration settings of the at least one of the plurality of IoT device families, wherein the one or more configuration settings correspond to the system-wide configuration update; and
modifying, based on the request, the one or more configuration settings for one or more IoT devices of the at least one of the plurality of IoT device families.
12 . The method of claim 11 , wherein the request to perform the system-wide configuration update is received from a privileged asset management (PAM) system, generated automatically based on a predetermined schedule, or both.
13 . The method of claim 11 , further comprising analyzing the at least one IoT device configuration by applying one or more rules associated with the at least one of the plurality of IoT device families.
14 . The method of claim 11 , wherein interrogating the at least one IoT device comprises accessing a configuration setting using an application programming interface associated with the at least one of the plurality of IoT device families of the at least one IoT device.
15 . The method of claim 11 , wherein interrogating the at least one IoT device comprises identifying one or more open network ports of the at least one IoT device.
16 . The method of claim 11 , wherein determining the one or more configuration settings of the at least one of the plurality of IoT device families comprises retrieving a configuration policy associated with the at least one of the plurality of IoT device families from a data store.
17 . The method of claim 11 , wherein modifying the one or more configuration settings comprises modifying the one or more configuration settings via at least one connection selected from a group consisting of: a telnet connection, an HTTP connection, a proprietary socket connection, and an FTP connection.
18 . The method of claim 11 , further comprising analyzing the at least one IoT device configuration to identify at least one security vulnerability, and wherein modifying the one or more configuration settings comprises disabling a feature associated with the at least one identified security vulnerability.
19 . The method of claim 18 , wherein the feature associated with the at least one identified security vulnerability comprises a wireless connectivity function, a network port, or both.
20 . The method of claim 11 , wherein modifying the one or more configuration settings comprises applying a configuration change profile associated with the at least one of the plurality of IoT device families of the one or more IoT devices.
21 . A non-transitory computer-readable medium embodying a program that, when executed by at least one computing device, causes the at least one computing device to at least:
receive a request to perform a system-wide configuration update;
interrogate at least one IoT device of at least one of the plurality of IoT device families to determine at least one IoT device configuration corresponding to the at least one of the plurality of IoT device families;
determine, based on the request and the at least IoT device configuration, one or more configuration settings of the at least one of the plurality of IoT device families, wherein the one or more configuration settings correspond to the system-wide configuration update; and
modify, based on the request, the one or more configuration settings for one or more IoT devices of the at least one of the plurality of IoT device families.