Gartner: By 2020, over 25% of security attacks will involve IoT

by Brianna Crandall — May 16, 2016 — Worldwide spending on Internet of Things (IoT) security will reach $348 million in 2016, a 23.7 percent increase from 2015 spending of $281.5 million, according to a recent report from global information technology research and advisory company Gartner, Inc.

Spending on IoT security is expected to reach $547 million in 2018 (see table below). Although overall spending will initially be moderate, Gartner predicts that IoT security market spending will increase at a faster rate after 2020, as improved skills, organizational change and more scalable service options improve execution.

“The market for IoT security products is currently small, but it is growing as both consumers and businesses start using connected devices in ever greater numbers,” said Ruggero Contu, research director at Gartner.

“Gartner forecasts that 6.4 billion connected things will be in use worldwide in 2016, up 30 percent from 2015, and will reach 11.4 billion by 2018,” continued Contu. “However, considerable variation exists among different industry sectors as a result of different levels of prioritization and security awareness.”

Worldwide IoT Security Spending Forecast (Millions of Dollars):

2014

2015

2016

2017

2018

231.86

281.54

348.32

433.95

547.20

Source: Gartner (April 2016)

According to the report, the market for IoT security products is dependent on IoT adoption by the consumer and industry sectors. Endpoint spending will be dominated by connected cars, as well as other complex machines and vehicles, such as heavy trucks, commercial aircraft, and farming and construction equipment.

Gartner predicts that by 2020, more than 25 percent of identified attacks in enterprises will involve IoT, although IoT will account for less than 10 percent of IT security budgets. Security vendors will be challenged to provide usable IoT security features because of the limited assigned budgets for IoT and the decentralized approach to early IoT implementations in organizations.

According to the report, vendors will focus too much on spotting vulnerabilities and exploits, rather than segmentation and other long-term means that better protect IoT.

“The effort of securing IoT is expected to focus more and more on the management, analytics and provisioning of devices and their data. IoT business scenarios will require a delivery mechanism that can also grow and keep pace with requirements in monitoring, detection, access control and other security needs,” said Contu.

“The future of cloud-based security services is in part linked with the future of the IoT,” continued Contu. “In fact, the IoT’s fundamental strength in scale and presence will not be fully realized without cloud-based security services to deliver an acceptable level of operation for many organizations in a cost-effective manner. By 2020, Gartner predicts that over half of all IoT implementations will use some form of cloud-based security service.”

More detailed analysis is available in the report “Forecast: IoT Security, Worldwide, 2016.” More information on the outlook for IoT can be found in the Gartner Special Report “The Internet of Things,” which looks at the necessary steps to building and rolling out an IoT strategy.

Gartner analysts will provide additional analysis on security trends at the Gartner Security and Risk Management Summits 2016 taking place in National Harbor, Maryland; Tokyo; Sao Paulo; Sydney; Mumbai and London. Follow news and updates from the events on Twitter at #GartnerSEC.