Security fabric for internet of things (IoT)

A non-transitory computer-readable storage medium embodying a set of instructions in an access point coupled to a data communication network, which when executed by one or more processors of a computer systems, causes the one or more processors to perform a method for improving network security on the data communication network, comprising:

• collecting, from network data packets received at a network communication interface of the access point, by an analyzing tier of a network security system of the access point, data of Internet of Things (IoT) devices from a plurality of data sources;
• abstracting, utilizing a processor of the access point, by the analyzing tier of the network security system, profiled element baselines (PEBs) of IoT devices from the data, wherein each of the PEBs includes characteristics of a same type of IoT device;
• retrieving, by an executing tier of the network security system communicatively coupled to the analyzing tier, the PEBs from the analyzing tier of the network security system, wherein the executing tier of the network security system is configured to control network traffic of one or more IoT devices of a private network;
• generating, by the executing tier of the network security system, one or more security policies for one or more IoT devices of the same type from the PEBs;
• controlling, by the executing tier of the network security system, network traffic of the one or more IoT devices of the private network to comply with the one or more security policies;
• retrieving, by an adapting tier of the network security system, the PEBs from the analyzing tier of the network security system, wherein the adapting tier of the network security system is configured to collect local network environment information;
• generating, by the adapting tier of the network security system, modified PEBs by tailoring the PEBs to accommodate the local network environment;
• retrieving, by the executing tier of the network security system, the modified PEBs from the adapting tier of the network security system;
• and
• generating, by the executing tier of the network security system, the one or more security policies for the one or more IoT devices of the same type from the modified PEBs,
• wherein the analyzing tier of the network security system classifies the characteristics of the type of IoT device into rigid and discretionary classes of security roles, wherein the characteristics of rigid class are mandatory to be implemented at the adapting tier and executing tier of the network security system and the characteristics of discretionary class are optional or adaptive at adapting tier or executing tier of the network security system.