Method and system for securing connections to IOT devices

A system for securing connections in systems including Machine to Machine (M2M) or Internet of Things (IoT) devices, wherein the system for securing connections in systems including M2M or IoT devices comprises:

• at least one M2M or IoT device;
• and
• an IoT application firewall (IAF) comprising one or more data processing systems configured to implement a proxy and a message analyzer,
• wherein the IAF is deployed in layers at two or more positions in the messaging path, wherein the two or more positions in the messaging path comprise at least two of:
• the at least one IoT device;
• an IoT gateway device;
• a cell tower;
• an edge computing system;
• a cloud server;
• or an IoT application, and wherein the proxy is configured to:
• dynamically compute a device profile from data flow to and from the at least one M2M or IoT device on a per-session basis or across sessions based on a position of the IAF in a messaging path to generate a dynamically computed device profile;
• and
• implement an action triggered by the message analyzer;
• wherein the message analyzer is configured to:
• receive a different initial device profile at each layer of the IAF for the at least one M2M or IoT device;
• learn the device profile based on the data flow to and from the at least one M2M or IoT device based on the position of the IAF in the messaging path to generate a learned device profile;
• compare the dynamically computed device profile for the at least one M2M or IoT device with any of the initial device profile and the learned device profile for the at least one M2M or IoT device or a combination thereof;
• and
• in response to determining that the dynamically computed device profile for the at least one M2M or IoT device at a position does not match any of the initial device profile at that position, the learned device profile at that position, or a combination thereof, for the at least one M2M or IoT device, trigger an action.

A computer program product stored on a non-transitory computer readable medium for securing connections in systems including Machine to Machine (M2M) or Internet of Things (IoT) devices, comprising computer readable instructions for causing a computer to control an execution of an application for securing connections in systems including M2M or IoT devices comprising:

• receiving a different initial device profile at each layer of an IoT application firewall (IAF) for at least one M2M or IoT device based on a position of the IAF in a messaging path, wherein the IAF is deployed in layers at two or more positions in the messaging path, wherein the two or more positions in the messaging path comprise at least two of:
• the at least one M2M or IoT device;
• an IoT gateway device;
• a cell tower;
• an edge computing system;
• a cloud server;
• or an IoT application;
• learning a device profile based on data flow to and from the at least one M2M or IoT device based on the position of the IAF in the messaging path to generate a learned device profile;
• dynamically computing a device profile on a per-session basis or across sessions based on the position of the IAF in the messaging path to generate a dynamically computed device profile;
• comparing the dynamically computed device profile for the at least one M2M or IoT device with any of:
• the initial device profile and the learned device profile for the at least one M2M or IoT device, or a combination thereof;
• and
• in response to determining that the dynamically computed device profile for the at least one M2M or IoT device at a position does not match any of:
• the initial device profile at that position, the learned device profile at that position, or a combination thereof, for the at least one M2M or IoT device, triggering an action.