An IoT developer wants to ensure that data collected from a remotely deployed power station monitoring system is transferred securely to the cloud…

Transport Layer Security (TLS) is a cryptographic protocol designed to provide secure communication over a computer network. For an IoT system, TLS encrypts the data channel between the remote device (power station monitor) and the cloud server. This ensures confidentiality, preventing eavesdropping, and integrity, preventing data tampering during transit. It is the industry-standard method for securing network connections for protocols like HTTPS and secure MQTT, making it the most appropriate choice for the developer's requirement.

A. Secure/Multipurpose Internet Mail Extensions (S/MIME): This is a standard for encrypting and signing email messages, not for securing a general-purpose data transport channel between an IoT device and the cloud.

B. Message-digest 5 (MD5): This is an obsolete hashing algorithm used to verify data integrity, not to provide confidentiality or secure the communication channel itself. It does not encrypt data.

C. Blowfish: This is a symmetric-key block cipher, which is an encryption algorithm. While a protocol like TLS might use such a cipher, Blowfish itself is not a complete protocol for securing data transfer.

1. National Institute of Standards and Technology (NIST). (2020). NISTIR 8259A: IoT Device Cybersecurity Capability Core Baseline. Section 4.2

"Data Protection

" states

"The IoT device protects the data it stores and transmits from unauthorized access and modification... Data in transit is protected using strong

validated

and approved cryptographic mechanisms (e.g.

TLS 1.2 or higher)."

2. Rescorla

E. (2018). RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3. Internet Engineering Task Force (IETF). The abstract states

"TLS provides a secure channel between two communicating peers; the protocol is designed to prevent eavesdropping

tampering

and message forgery."

3. AWS IoT Core Developer Guide. (n.d.). Transport security. Amazon Web Services. The documentation specifies

"Transport Layer Security (TLS) is a protocol for encrypting communication. In AWS IoT

all communication is encrypted using TLS." This is representative of standard cloud vendor requirements for IoT.

4. Hillar

G. C. (2015). Internet of Things with Python. Chapter 7

"Making Things Secure." This chapter

in a publication from a reputable technical publisher often used in academic settings

explains that protocols like MQTT must be layered over TLS to secure data in transit.