The growth of Internet of Things (IoT) in our daily life creates immense opportunities and benefits for our society. However, IoT security has not kept up with the same rapid pace of innovation and development. This situation creates substantial security flaws and putting our privacy at risk. This talk will present the new challenges we are facing with the new revolution of IoT, including concrete demonstrations. In addition, we will present possible solutions how to deal with those challenges. Finally, we will do some fun coding by a POC on one of these solutions.

1. Security in the IoT generation
Guy Rombaut
CTO - One.Fit
Milan 30 November 2018

3. Internet of
People

6. But what about
Security
?

14. The 'S' in IoT stands for security.

15. The Rugged Manifesto
I recognize that my code will be used in
ways I cannot anticipate, in ways it was
not designed, and for longer than it was
ever intended.
I recognize that my code will be attacked
by talented and persistent adversaries
who threaten our physical, economic and
national security.
I am rugged, not because it is easy, but
because it is necessary and I am up for
the challenge.

16. Secure by
Design

17. Example 1:
http://www.example.net/cgi-bin/article.sh?name=../../../../../etc/passwd
Example 2:
http://vulnerable-page.org/cgi-bin/main.cgi?file=main.cgi
Example 3:
<?php
$template = 'blue.php';
if ( is_set( $_COOKIE['TEMPLATE'] ) )
$template = $_COOKIE['TEMPLATE'];
include ( "/home/users/phpguru/templates/" . $template );
?>

18. Secure by Design
Confidentiality
Integrity
Availability

19. Device Authentication
Something you know
Something you have

20. The end* of
Cloud
Computing

21. Security of the
IoT Network

22. Security of the
Smart Home

24. Guy Rombaut
One.Fit
guy@one.fit