There was a talk at an event I work for (that's the full disclosure done) on building security into the IoT. It was made by a Hardware Manager of the original iPhone, a patent holder for NEST and is now CEO at Electric Imp. In short, he argued that security has to be layered into every stage of the design process. The current paradigm is to make something and try to retrofit security features into it.

http://iot.thebln.com/2016/02/building-security-into-iot-int...