In this presentation you will learn: How IoT will affect our everyday lives, extending from our home, to our car and into our workspace; Why things need identity—and what form this identity should take; The five top security risks in the Internet of Things; How you can manage and mitigate these risks and what we can learn from classic IAM, and what we must do differently. For more information on CA Security solutions, please visit: http://bit.ly/10WHYDm

1. ca Securecenter
Hello, Dishwasher! The Looming
Identity Crisis on the Internet of Things
K. Scott Morrison
SCX12S #CAWorld
CA Technologies
SVP & Distinguished Engineer

2. Hello, Dishwasher.

3. © 2014 CA. ALL RIGHTS RESERVED.
3
Hello, Scott

4. SVP & Distinguished Engineer
Scott.Morrison@ca.com
@KScottMorrison
slideshare.net/CAinc
linkedin.com/KScottMorrison
ca.com
K. Scott Morrison
You Know Who I Am…

5. © 2014 CA. ALL RIGHTS RESERVED.
5
But WhoIs The Dishwasher?

6. © 2014 CA. ALL RIGHTS RESERVED.
Where Do I Put My Password?

7. © 2014 CA. ALL RIGHTS RESERVED.
Identity Is Approaching Critical MassAverage Number Of Online IDs26Ave Number of Facebook Friends336
Today Internet Users2.4B“People Have Identity” Things 2020 Phones, Tablets and Laptops7.3B“Things Have Identity” 26.0B
Internet users Internet World Stats Q1 2012: http://www.internetworldstats.com/stats.htm
Internet accounts Experian July 2012: http://www.bbc.com/news/technology-18866347
Facebook Pew Research: http://www.pewresearch.org/fact-tank/2014/02/03/6-new-facts-about-facebook/

8. © 2014 CA. ALL RIGHTS RESERVED.
8
Abstract
Scott Morrison
CA Technologies
Distinguished Engineer
In this session, you will learn:
How IoTwill affect our everyday lives, extending from our home, to our car and into our workspace.
Why thingsneed identity—and what form this identity should take.
The 5 top security risks in the Internet of Things.
How you can manage and mitigate these risks.
What we can learn from classic IAM, and what we must do differently.

9. © 2014 CA. ALL RIGHTS RESERVED.
Change
Agent

10. © 2014 CA. ALL RIGHTS RESERVED. APIpplicationrogrammingnterface

11. © 2014 CA. ALL RIGHTS RESERVED. While we are talking…
7
Approximate number of global web pages

12. © 2014 CA. ALL RIGHTS RESERVED.
12
For Example:
GEThttp://services.layer7.com/staff/Scott

13. © 2014 CA. ALL RIGHTS RESERVED.
13
For Example:
{
"firstName":”Scott",
"lastName" :”Morrison",
”title" : “CTO”,
"address" :
{
"streetAddress": ”405-1100 Melville",
"city" :”Vancouver",
”prov" :”BC",
"postalCode" : ”V6E 4A6"
},
"phoneNumber":
[
{
"type" : ”office",
"number": ”605 681-9377"
},
{
"type" :”home",
"number": ”604 555-4567"
}
]
}
http://services.layer7.com/staff/Scott

14. © 2014 CA. ALL RIGHTS RESERVED.
Did you check the weathertoday?

15. © 2014 CA. ALL RIGHTS RESERVED.
API

16. © 2014 CA. ALL RIGHTS RESERVED.

17. 17
© 2014 CA. ALL RIGHTS RESERVED.
The Apps On Your Phone Are A Glimpse Into the Future Of Enterprise IT
© 2014 CA. ALL RIGHTS RESERVED.

18. © 2014 CA. ALL RIGHTS RESERVED.
Mobile is empowering to the individual.

19. 19
© 2014 CA. ALL RIGHTS RESERVED.
Mobile is also about relationships.

20. © 2014 CA. ALL RIGHTS RESERVED.
Mobile identity remains hard.

21. © 2014 CA. ALL RIGHTS RESERVED.

22. © 2014 CA. ALL RIGHTS RESERVED.
22
User
Apps
Devices
Mobile taught us the importance of contextual identity.

23. © 2014 CA. ALL RIGHTS RESERVED.
23
Mobility defines our relationship to things.

24. © 2014 CA. ALL RIGHTS RESERVED.
24
And mobile is the controller of the things.

25. © 2014 CA. ALL RIGHTS RESERVED.
25
Cloud
The emerging IoTarchitecture leverages APIs.
Things
APIs
Mobile control tier
Lots of brandson this page. OK with that?
IoTProvider
Gateway

26. © 2014 CA. ALL RIGHTS RESERVED.
26
Identity in IoTfollows mobility.

27. © 2014 CA. ALL RIGHTS RESERVED.
27
Demonstration: How OAuthWorks

28. © 2014 CA. ALL RIGHTS RESERVED.
Tokens are well suited for machines

29. © 2014 CA. ALL RIGHTS RESERVED.
29
Bootstrap trust by embedding tokens…..
0AD4C23A00B…

30. © 2014 CA. ALL RIGHTS RESERVED.
30
And let OAuthand OpenIDconnect take over.
API
Authorization Server

31. © 2014 CA. ALL RIGHTS RESERVED.
31
How does classical IAM fit in all of this?
Highly centralized and hierarchal
Centralized, legacy LDAP directory
Internally focused identity life cycle
SAML-style federation
Login-centric reporting

32. © 2014 CA. ALL RIGHTS RESERVED.
32
ClassicalIAM misses what OAuthwas really about.
The Old Enterprise
The New Hybrid Enterprise
This is the secret to scale and agile federation

33. © 2014 CA. ALL RIGHTS RESERVED. Centralized identity management has reached its limit for growth. IoTidentity is: Decentralized Peer-to-peer Empowered identity owners

34. © 2014 CA. ALL RIGHTS RESERVED.
34
What is it we are missing?
Change in roles
Shift in responsibility
The need to be agile
Responding to modern risk profiles

35. © 2014 CA. ALL RIGHTS RESERVED.
35
What must IoTidentity look like?
Token Centric
–OAUth, OpenIDConnect
Automatic, scalable rules of engagement
–Unlicensed Mobile Access
Rich identity context
Continuous authentication
–Anytime step up, plus reactionary clients

36. © 2014 CA. ALL RIGHTS RESERVED.
36
What must IoTidentity look like? (cont.)
Cloud-scale identity persistence
–Hadoopand NOSQL Databases
Federated risk management
–Broad visibility and situational awareness
Modern, big-data driven reporting

37. © 2014 CA. ALL RIGHTS RESERVED.
37
Want To See IoTIdentity For Real?
DEMOSTATION
SPECIFIC DEMO
IoT
Micro CA API Gateway on Raspberry PI
IoT
Automatic door unlock using beacon, phone, and corporate identity
Innovation
Device to device, app to app single sign on and application context transfer using CA Mobile Access Gateway
IoT
Streaming video from drone running through CA API Gateway

38. © 2014 CA. ALL RIGHTS RESERVED.
38
For More Information
To learn more about Security, please visit:
http://bit.ly/10WHYDm
Insert appropriate screenshot and textoverlayfrom following“More Info Graphics” slide here; ensure it links to correct page
Security

39. © 2014 CA. ALL RIGHTS RESERVED.
39
For Informational Purposes Only
© 2014CA. All rights reserved. All trademarks referenced herein belong to their respective companies.
This presentation provided at CA World 2014 is intended for information purposes only and does not form any type of warranty. Some of the specific slides with customer references relate to customer's specific use and experience of CA products and solutionssoactual results may vary.
Terms of this Presentation