Edge computing is changing IT landscapes for good. More and more companies are using the technology to optimize their data processing and speed up processes: Retailers are using sensors and cameras to monitor stock levels and shelves, the manufacturing industry is relying on AI-supported solutions to optimize production processes, and the healthcare sector is also benefiting from decentralized data processing - for example in the remote monitoring of patients or the processing of medical imaging directly on site.

The countless applications across all industries are leading to a rapid increase in devices that collect and process data directly where it is generated. Companies no longer have to send the collected information to data centers to be processed and sent back, but can analyze it locally. This reduces latency times, which brings enormous speed advantages, especially for critical applications, such as quality monitoring solutions in production that require immediate intervention. Hybrid forms between the two concepts also shorten response and reaction times by pre-analyzing data at the edge and sending it to a data center or cloud for further processing.

Safety requires a broad perspective

However, as in many areas, the same applies to edge computing: where there is light, there is also shadow. This can be seen in the form of security vulnerabilities at the edge of the network, unsecured devices and transmission paths - in short, decentralized data processing that removes systems and devices alike from the direct control of IT departments and provides points of attack for cyberattacks. While on-site data centers have IT experts, firewalls, intrusion detection systems and physical access controls, devices at the edge are often vulnerable by comparison, for example in production halls, retail stores or wind turbines. Typical human negligence exacerbates the problem, for example when employees on site do not manage passwords properly, fail to install updates or unknowingly introduce malware. In addition to the many advantages of edge computing, companies must therefore not overlook the dangers associated with it.

Data protection directly at the Edge

New problems need new solutions, and securing data at the edge is no exception. This is no easy task, and the solution requires a multi-layered approach. Encrypting the collected data and its transmission paths is a basic requirement. This applies to individual files and hard disks as well as communication between devices and data transfer to the cloud or other systems. End-to-end encryption, protocols such as TLS (Transport Layer Security) and VPNs help companies to protect data from unauthorized access. However, there is also a risk on the hardware side, which is why another focus must be on physically securing the devices.

Manage systems correctly

In addition to such measures, all events at the edge should be logged in order to quickly detect security breaches and anomalies and remain capable of taking action. Seamless logging is also the only way to prove compliance with standards, as required by law in industries such as healthcare or financial services. As systems are only secure if they are managed and used correctly, another focus is on employee training. The correct handling of data and compliance with security protocols are fundamental aspects of any cybersecurity strategy. While training courses, guidelines and workshops provide information on the correct procedure and dangers, simulated attack scenarios are a good way of sensitizing employees and testing their reactions.

On the safe side with BaaS

However, anyone who thinks they are already safe with these measures is mistaken, because despite all preventive measures, there is no such thing as one hundred percent protection. Cyber attacks are a bitter reality, so the question is not whether your system will be affected, but when. Once attackers penetrate the network, they can delete, manipulate, encrypt and steal data - a worst-case scenario. Preparation is everything. Just in case, companies should therefore not only invest in preventative measures, but also implement backup solutions as a precaution. Installing on-premises solutions would be the classic way to do this - an approach that is, however, associated with considerable costs and high expenditure on hardware, software and maintenance. Backup-as-a-Service (BaaS) solutions, which allow companies to back up their edge data on a cloud platform, are attractive alternatives. In this way, they do not have to set up and manage their own technical infrastructure, but benefit from low entry costs and an easily calculable cost model.

As a general rule, the security measures that companies take at the edge must not be silos. Instead, they should be embedded in a holistic cybersecurity strategy that encompasses all of a company's data - from the data center to the cloud to the edge. Only overarching standards, guidelines, processes, solutions and services guarantee a uniform level of protection, reduce complexity and ensure efficiency.

Sven Tobie, DACH Strategist OEM Solutions EMEA, Dell Technologies / red