Question

A manufacturer is hardening a fleet of industrial IoT sensors that push telemetry to a cloud platform. Threat modeling identifies persistent malware surviving reboots and unauthorized firmware modifications as the highest risks. The devices have constrained TPMs, limited compute, and must remain in the field for a decade with over-the-air (OTA) updates. Which control combination BEST addresses the identified risks while remaining feasible on the constrained hardware?

Accepted Answer

Enforce a hardware root-of-trust with measured secure boot and require cryptographically signed firmware images validated before any OTA update is applied

Answer

Deploy a host-based EDR agent on each sensor and forward endpoint logs to the cloud SIEM for behavioral analysis

Answer

Encrypt all telemetry with TLS 1.3 and rotate the device symmetric keys weekly via the OTA channel

Answer

Segment the sensors onto an isolated VLAN and require a jump host for any administrative access to the fleet