Which of the following technologies allows for encryption of networking communications without requiring any configuration on IoT endpoints?

A Virtual Private Network (VPN), specifically when implemented as a site-to-site or gateway-to-site tunnel, allows for the encryption of all network traffic originating from a local network segment. In this configuration, an IoT gateway or edge router establishes the encrypted tunnel to a remote network. The individual IoT endpoints on the local network simply send their traffic to the gateway, unaware that their communications are being encrypted. This architecture centralizes security management and abstracts the encryption process away from the endpoints, which may be resource-constrained or lack the ability to be configured for other security protocols.

A. Transport Layer Security (TLS): TLS provides end-to-end encryption but requires that the client application on the IoT endpoint be specifically configured to initiate and manage the secure session.

B. Internet Protocol Security (IPSec): While IPSec is the protocol often used to create VPN tunnels, it is not the complete technology. Furthermore, in its "transport mode," IPSec requires configuration on each endpoint.

D. Elliptic curve cryptography (ECC): ECC is a type of cryptographic algorithm, not a network communication technology. It is a component used by protocols like TLS and IPSec to perform key exchange and create digital signatures.

1. Cisco. (2020). Fundamentals of IoT Security. Cisco Press. In Chapter 5

"Securing the IoT Network

" the text discusses the use of VPNs at the network edge. It explains that VPN gateways can be used to create secure tunnels for IoT traffic

stating

"The use of VPNs can provide confidentiality... without requiring the IoT devices themselves to support complex cryptographic protocols." (Paraphrased from concepts in Chapter 5

Section "VPNs for IoT").

2. Hanes

D.

Salgueiro

G.

Grossetete

P.

Barton

R.

& Henry

J. (2017). IoT Fundamentals: Networking Technologies

Protocols

and Use Cases for the Internet of Things. Cisco Press. Chapter 11

"IoT Security

" describes architectural approaches where security is handled by an edge gateway. The gateway terminates the VPN connection

meaning the devices behind it do not need to be VPN-aware.

3. Lin

J.

Yu

W.

Zhang

N.

Yang

X.

Zhang

H.

& Zhao

W. (2017). A Survey on Internet of Things: Architecture

Enabling Technologies

Security and Privacy

and Applications. IEEE Internet of Things Journal

4(5)

1125-1142. https://doi.org/10.1109/JIOT.2017.2683200. In Section IV-B

"Network Layer Security

" the paper discusses how gateways can be used to implement security measures like VPNs on behalf of resource-constrained devices

thereby providing transparent security.