Editing New threat models on authentication (section)

==Authentication in the age of IoT==
Recent evolutions in network topologies are pushing to reconsider the authentication problem. With the increase of Internet of things (IoT), more and more devices are being connected to networks. Beside the visible development of consumer’s devices, IoT is spreading in many industries such as transport, maritime, oil and gas, mining or agriculture. These devices may contain critical information, and their security needs to be carefully assessed.

One solution to manage the identity of such devices is to hardcode a master key in them. This key can be used directly, or to derive session keys, but in any case, the security of the device reduces to securing the key stored in the device. While this may be considered a good solution due to the limited computational power of such devices, it does not face well the new threats arising in the world of IoT. Such devices are assumed to be light, and their security should consider situations where their identity credentials get stolen or copied. Handling security in a manner that takes into account this threat model and in such networks is considered a challenge by security experts.