Abstract: Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a baseline behavior profile for a gateway virtual machine is transmitted from a management service to a gateway security process executed in a gateway device. The management service receives an anomaly notification including an indication of an anomaly from the baseline behavior profile. The managements service generates a user interface that shows a description of the anomaly.

Abstract: Disclosed are various examples for gateway onboarding for IoT device management. In one embodiment, management service data is received. The management service data includes an enterprise identifier, and a management service address that specifies a network endpoint of the management service. A gateway is registered in association with the management service data based on receiving a registration request comprising: a gateway identifier, and the enterprise identifier. An activation request with the gateway identifier is received from the gateway, and the management service data is provided to the gateway.

Abstract: Disclosed are various examples of utilizing blockchain for tracking and auditing of systems and processes that involve Internet-of-Things (IoT) devices. A command to install an IoT event definition that defines an IoT event for a specified asset type is transmitted. IoT event data that indicates an IoT event has been triggered based on the IoT event definition is received. An IoT event block is recorded to a blockchain, the IoT event block comprising sensor data and an indication that at least one IoT device triggered the IoT event.

Abstract: Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a baseline behavior profile for a gateway virtual machine is transmitted from a management service to a gateway security process executed in a gateway device. The management service receives an anomaly notification including an indication of an anomaly from the baseline behavior profile. The managements service generates a user interface that shows a description of the anomaly.

Abstract: Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a profile is associated with a virtual machine of a gateway device. The profile includes an expected behavior for the virtual machine. The virtual machine is executed by a hypervisor of the gateway device. An actual behavior for the virtual machine is determined. A remedial action is performed. The remedial action is based on an anomaly between the expected behavior and the actual behavior.

Abstract: Disclosed are various examples for gateway onboarding for IoT device management. In one embodiment, management service data is received. The management service data includes an enterprise identifier, and a management service address that specifies a network endpoint of the management service. A gateway is registered in association with the management service data based on receiving a registration request comprising: a gateway identifier, and the enterprise identifier. An activation request with the gateway identifier is received from the gateway, and the management service data is provided to the gateway.

Abstract: Disclosed are various examples for generating an Internet-of-Things (IoT) system topology. A user interface includes a graphical representation of components. A relationship between the plurality of components is determined based on user-defined connections between the components. IoT topology code is generated. The IoT topology code includes the relationship between the plurality of components and properties for individual ones of the components. The IoT topology code is converted to executable gateway instructions that enable a gateway device to communicate with an IoT device. The gateway instructions are transmitted to the gateway device.

Abstract: Disclosed are various examples for gateway onboarding for IoT device management. In one embodiment, activation of a gateway is initiated by transmission of a request to activate the gateway to a network address. The request to activate the gateway includes a gateway identifier that uniquely identifies the gateway. A gateway enrollment agent is received. Enrollment of the gateway with the management service is performed using the gateway enrollment agent. The enrollment includes a transmission of a request to enroll the gateway to a management service address and an installation of an enrollment policy received from the management service. The gateway enrollment agent is updated to a gateway management agent that includes an ability to install at least one IoT device management product.

Abstract: Disclosed are various examples for generating an Internet-of-Things (IoT) system topology. A user interface includes a graphical representation of components. A relationship between the plurality of components is determined based on user-defined connections between the components. IoT topology code is generated. The IoT topology code includes the relationship between the plurality of components and properties for individual ones of the components. The IoT topology code is converted to executable gateway instructions that enable a gateway device to communicate with an IoT device. The gateway instructions are transmitted to the gateway device.

Abstract: Disclosed are various examples of utilizing blockchain for tracking and auditing of systems and processes that involve Internet-of-Things (IoT) devices. A command to install an IoT event definition that defines an IoT event for a specified asset type is transmitted. IoT event data that indicates an IoT event has been triggered based on the IoT event definition is received. An IoT event block is recorded to a blockchain, the IoT event block comprising sensor data and an indication that at least one IoT device triggered the IoT event.

Abstract: Disclosed are various examples of utilizing blockchain for tracking and auditing of systems and processes that involve Internet-of-Things (IoT) devices. In one example, an IoT event definition is installed on a gateway. The IoT event definition includes a threshold value associated with an asset type. The gateway receives sensor data from an IoT device associated with the asset type. The gateway determines that the IoT device triggered an IoT event based on the sensor data and the IoT event definition. The sensor data indicates that the IoT device triggered the IoT event based on the threshold value. The gateway transmits, to a management service, a request to record an IoT event to a blockchain. The request includes the sensor data. A block that includes the sensor data is recorded to the blockchain.

Abstract: Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a profile is associated with a virtual machine of a gateway device. The profile includes an expected behavior for the virtual machine. The virtual machine is executed by a hypervisor of the gateway device. An actual behavior for the virtual machine is determined. A remedial action is performed. The remedial action is based on an anomaly between the expected behavior and the actual behavior.

Abstract: Disclosed are various examples for generating an Internet-of-Things (IoT) system topology. A user interface includes a graphical representation of components. A relationship between the plurality of components is determined based on user-defined connections between the components. IoT topology code is generated. The IoT topology code includes the relationship between the plurality of components and properties for individual ones of the components. The IoT topology code is converted to executable gateway instructions that enable a gateway device to communicate with an IoT device. The gateway instructions are transmitted to the gateway device.

Abstract: Disclosed are various examples of utilizing blockchain for tracking and auditing of systems and processes that involve Internet-of-Things (IoT) devices. In one example, an IoT event definition is installed on a gateway. The IoT event definition includes a threshold value associated with an asset type. The gateway receives sensor data from an IoT device associated with the asset type. The gateway determines that the IoT device triggered an IoT event based on the sensor data and the IoT event definition. The sensor data indicates that the IoT device triggered the IoT event based on the threshold value. The gateway transmits, to a management service, a request to record an IoT event to a blockchain. The request includes the sensor data. A block that includes the sensor data is recorded to the blockchain.

Abstract: Disclosed are various examples for gateway onboarding for IoT device management. In one embodiment, activation of a gateway is initiated by transmission of a request to activate the gateway to a network address. The request to activate the gateway includes a gateway identifier that uniquely identifies the gateway. A gateway enrollment agent is received. Enrollment of the gateway with the management service is performed using the gateway enrollment agent. The enrollment includes a transmission of a request to enroll the gateway to a management service address and an installation of an enrollment policy received from the management service. The gateway enrollment agent is updated to a gateway management agent that includes an ability to install at least one IoT device management product.