Page 179 - Cyber Defense eMagazine RSAC Special Edition 2025

Cloud-Based Operation and Increased Cyber Threat Vulnerability

Cloud dependency remains a major weak point in smart building security. While cloud solutions offer
scalability and remote accessibility; they also create multiple vulnerabilities. Any system that transmits
data over the internet inherently exposes itself to interception, hacking, or service disruptions. Cloud-
based architectures are often targeted by distributed denial-of-service (DDoS) attacks, which can bring
down critical systems and disrupt building operations.

Another issue is data privacy. Cloud-reliant systems collect, process, and store vast amounts of occupant
data, including access credentials and behavioral patterns. This concentration of sensitive information
makes cloud-based platforms attractive targets for cybercriminals. Moreover, misconfigurations in cloud
security settings or inadequate encryption measures can expose user data, leading to potential breaches
with severe financial and reputational consequences.

Keys to Transform Cybersecurity in Smart Buildings: Edge Computing, Air Gapped Networks,
and Hardware-First Security

A shift toward a decentralized approach by eliminating external access points can address these
vulnerabilities effectively.

• Edge Computing for Real-Time Security: Processing data at the edge— closer to its source—
significantly reduces the risk of cyberattacks by minimizing data transmission to external
networks. By keeping critical information within the local environment, organizations can limit
exposure to remote threats while ensuring faster response times for threat detection and
mitigation.
• Air-Gapped Networks for Enhanced Isolation: Air-gapped systems physically separate critical
networks from the internet and other external access points, preventing cyber intrusions. This
approach ensures that even if one system is compromised, it does not serve as a gateway to the
entire infrastructure. With air-gapped networks, malicious actors are unable to exploit remote
entry points, reducing the likelihood of ransomware attacks and unauthorized system
manipulations.
• Hardware-First Security for Data Privacy: Implementing security at the hardware level ensures
that only essential data is collected, minimizing exposure to potential breaches. For instance,
instead of recording and transmitting full audio feeds, security solutions can be designed to
analyze data in real-time and transmit only essential signals, such as identifying abnormal sound
patterns without recording conversations. Similarly, motion sensors can differentiate human
presence, eliminating the need for invasive surveillance.

Bluetooth® Mesh Security: Encryption, Authentication, and Privacy

Bluetooth® Mesh has emerged as a powerful networking open standard for smart buildings, industrial
automation, and connected lighting systems. With its ability to support thousands of devices in a
decentralized network, security is a top concern. Cyberattacks such as eavesdropping, replay attacks,
unauthorized access, and denial-of-service (DoS) attacks pose serious threats to IoT systems.

179