The document discusses security challenges for IoT devices and what is needed to secure them. It outlines the OWASP IoT top 10 vulnerabilities, including issues like lack of encryption, authentication, and insecure interfaces. Key challenges are devices having critical functions, long lifecycles, proprietary protocols, and operation outside typical security perimeters. The conclusion states security must be designed into IoT devices from the start.

1. What is Really Needed
to Secure the Internet of Things?

2. Contents
• Introduction
• OWASP Internet of Things Top Ten Project
• Security Challenges for IoT
• Cyber Warfare
• Security Requirements of IoST(Internet of Secure Things)
• Conclusion
• Question & Answer

3. Introduction
• IoT includes everything in our life.
• But many devices are vulnerable from attack.
• It is necessary to secure the Things themselves.

4. • Insecure Web Interface (XSS/SQLi/CSRF)
• Insufficient Authentication / Authorization
• Insecure Network Services (BOF / Fuzzing)
• Lack of Transport Encryption (Lack of SSL / TLS)
• Privacy Concerns (Data Encryption)
• Insecure Cloud Interface
• Insecure Mobile Interface
• Insufficient Security Configurability
• Insecure Software / Firmware (need Encrypted Update)
• Poor Physical Security (External Ports, Storage Eject)
Vulnerabilities of IoT Device

5. Security Challenges for IoT
• Critical Functionality
• Replication
• Security Assumptions
• Not easily Patched
• Long Life Cycle
• Proprietary / Industry specific Protocols
• Deployed outside of Enterprise Security Perimeter

6. Critical Functionality

7. Replication

8. Replication

9. Security Assumption

10. Not Easily Patched

11. Long Life Cycle
15~20
Years

12. Specific Protocols

13. Deployed Outside of
Enterprise Security Perimeter

14. Cyber Warfare, StuxNet

15. Secure Boot Secure code
Updates
Data Security
Authentication
Secure
Communication
Protection
Against Attacks
Monitoring
Embedded
Security Management
Device Tampering
Detection
Requirements IoST

16. Conclusion
Security must be considered
early in the design process.