Management of internet of things (IoT) by security fabric

A computer-implemented method in a network security system communicatively coupled to a data communication network for automatically applying network security policies to Internet of Things (IoTs) for individualized for private network subscribers, the method comprising:

• providing a subscription service, by an analyzing tier of the network security system, for a plurality of subscribers, each at a private network assessable remotely to the network security system over the data communication network;
• collecting for the subscribers, by the analyzing tier of the network security system, data of IoT devices from a plurality of data sources on a plurality of private networks including network traffic logs, data packet samples and configuration information of internal IoT devices, wherein the analyzing tier is cloud-based;
• abstracting for the subscribers, by the analyzing tier of the network security system, profiled element baselines (PEBs) of IoT devices on the plurality of private networks from the data, wherein each of the PEBs includes characteristics of an IoT device;
• retrieving for the subscribers, by an executing tier of the network security system on one of the plurality of private networks, the PEBs from the analyzing tier of the network security system, wherein the executing tier of the network security system is configured to control network traffic of one or more IoT devices of the one of the plurality of private networks;
• collecting from the subscribers, by the analyzing tier of the network security system, environmental information about the plurality of networks and network security policies of the one of the plurality of private networks;
• modifying the PEBs, by the analyzing tier of the network security system, based on local environmental information of a specific private network hosting the one or more IoT devices;
• generating, by the executing tier of the network security system at the specific private network, one or more security policies for one or more IoT devices from the modified PEBs of the one or more IoT devices;
• controlling, by the executing tier of the network security system at the specific private network, network traffic of the one or more IoT devices of the specific private network to comply with the one or more security policies of the modified PEB;
• retrieving, by an adapting tier of the network security system, the PEBs from the analyzing tier of the network security system, wherein the adapting tier of the network security system is configured to collect local network environment information;
• generating, by the adapting tier of the network security system, modified PEBs by tailoring the PEBs to accommodate the local network environment;
• retrieving, by the executing tier of the network security system, the modified PEBs from the adapting tier of the network security system;
• and
• generating, by the executing tier of the network security system, the one or more security policies for the one or more IoT devices from the modified PEBs,
• wherein the analyzing tier of the network security system classifies the characteristics of the type of IoT device into rigid and discretionary classes of security roles, wherein the characteristics of rigid class are mandatory to be implemented at the adapting tier and executing tier of the network security system and the characteristics of discretionary class are optional or adaptive at adapting tier or executing tier of the network security system.