Application security as crucial to the modern distributed trust model
•
0 likes•4,690 views
The document discusses the need for application layer security given three modern trends: scale, hyperconnectivity, and the merger of cyber and physical worlds. It notes that by 2020 there will be billions of connected people and devices generating huge amounts of data. Application security is crucial because isolation defeats connectivity, and ransomware and other malware pose risks. The document argues that software self-defense through mechanisms within devices and applications can help address these issues, providing security that is simple, self-maintaining, and inexpensive.
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Similar to Application security as crucial to the modern distributed trust model
Similar to Application security as crucial to the modern distributed trust model (20)
More from LINE Corporation
More from LINE Corporation (20)
Recently uploaded
Recently uploaded (20)
Application security as crucial to the modern distributed trust model
- 1. © 2017 Intertrust Technologies Corporation. All rights reserved. Application security as crucial to the modern distributed trust model LINE-Intertrust Security Summit 1 —Tokyo May 17, 2017 Dave Maher, CTO Intertrust
- 2. © 2017 Intertrust Technologies Corporation. All rights reserved. Three drivers for Application layer security 2 1. Scale 2. Hyper-connectivity 3. Implications of Merger of the Cyber and Physical worlds
- 3. © 2017 Intertrust Technologies Corporation. All rights reserved. Scale 3 20204 BILLION Connected People $4 TRILLION Revenue Opportunity 25+ MILLION Apps 25+ BILLION Embedded and Intelligent Systems 50 TRILLION GBs of Data
- 4. © 2017 Intertrust Technologies Corporation. All rights reserved. Hyperconnectivity and dynamic and ephehemeral networks 4
- 5. © 2017 Intertrust Technologies Corporation. All rights reserved. Merger of Cyber and Physical worlds bring huuuuge risks 5
- 6. © 2017 Intertrust Technologies Corporation. All rights reserved. Isolation defeats the purpose of connectivity 6
- 7. © 2017 Intertrust Technologies Corporation. All rights reserved. Ransomware and other malware 7
- 8. © 2017 Intertrust Technologies Corporation. All rights reserved. Software self-defense addresses scale 8 Things must become responsible for themselves
- 9. © 2017 Intertrust Technologies Corporation. All rights reserved. 9
- 10. © 2017 Intertrust Technologies Corporation. All rights reserved. • Security within the device or application — self-defense • Security mechanisms that are simple for users, self-maintaining, inexpensive yet strong • Security can be lightweight yet strong • Defense-in-depth: Additional layers, including • Network security where appropriate • Cloud-based services that can detect patterns of illicit activity • Protection of application data and device sensor info • Protection of resources • Secure delegation: Make it easy to give access to legitimate users but hard for illicit users Trust models — what we rely on for Safety, Security, Privacy 10
- 11. © 2017 Intertrust Technologies Corporation. All rights reserved. Model for an internet connected thing 11 Sensors Physical Interfaces Communications Security Associations Remote Controller Cloud Services Thing Remote Front Panel Status Security Manager
- 12. © 2017 Intertrust Technologies Corporation. All rights reserved. • Except by legitimate users • Part of a defensed in depth strategy • When a device or application appears on a network, don’t shout out too much • Incremental and tokenized discovery can keep things friendly for legitimate users • Protocols can help assure things appear uninteresting to illegitimate users Make valuable devices difficult to discover 12
- 13. © 2017 Intertrust Technologies Corporation. All rights reserved. Reference Monitor 13 Reference Monitor Security Associations Audit Trail Device ControlsUser
- 14. © 2017 Intertrust Technologies Corporation. All rights reserved. • A Security Association (SA) is the establishment of shared security attributes between two network entities to support secure communication • We can use a similar approach for authorization using Message Authentication Codes • We can include permissions in an SA authorizing use of commands or access to state and sensor data in a device or application • Keys are typically part of an SA • We can use cloud services to simplify SA management and associated key management for IoT devices and applications Security Associations 14
- 15. © 2017 Intertrust Technologies Corporation. All rights reserved. Secure Key Vault 15 • Access to applications and devices can be protected using cryptographic keys in security associations • Need a secure place to keep them
- 16. © 2017 Intertrust Technologies Corporation. All rights reserved. • Collect behavior info from devices and applications • Learn normal behavior • Detect and classify anomalies • Determine threat thresholds • Set alarms and notifications • All without tipping off intruders Secure Telemetry and Threat Analytics 16
- 17. © 2017 Intertrust Technologies Corporation. All rights reserved. 1. When we design applications and IoT devices today we must keep in mind • Scale • Hyper-connectivity • Implications of Merger of the Cyber and Physical worlds 2. We CAN keep things simple and friendly but we must take care 17 Conclusion
- 18. © 2017 Intertrust Technologies Corporation. All rights reserved. Thank you