Brief introduction to the security threats relating to Internet of Things (IOT) and some techniques pot protect against them. Presented at SetSquared event: The Internet of Threats: start-up opportunities in IoT security 7/10/2015

1. nquiringminds

2. BIG DATA
ANALYTICS
IOT SECURITY
SMART CITIES
MARKET
PLATRORM
CAPABILITIES
A SECURE DATA PLATFORM FOR
BIG DATA AND IOT

3. IOT SECURITY CRISIS

4. Analysts consensus
is enterprise data
will grow
50xyear on year 2014
through to 2020

5. IOTBUSINESS

6. Average Internet
of Things device
has
25security flaws

8. “And if you can
update the
firmware on the
main board, you
can make the
pump do whatever
you like,” Rios says.

9. apply
the
brakes,
kill the
engine
and take
control
of
steering
over the
internet

10. IOT BUSINESS CONTEXT

11. PRODUCT>SUBSCRIPTION
SALE

12. SECURITYASBUSINESS
ENABLER

13. TRUST UPTAKE

14. WHAT IS NEEDED

15. $2 2 years
20Mhz 64 Kb

16. There is
(often) no
I
in IOT
CHALLENGES
 Interoperability – common foundation
 The Network – No I in IOT
 Encryption – 64k 20MhZ challenge
 Provenance - where data comes from
 Destination – where data goes to
 Permissioning – who has access
 Trusting device – flashing/rooting

18. ENDTOENDSECURITY
Server
Application
Sensor
IOT-HUB
Server

19. IOTSECURITYSOLUTION
Trusted Data Exchange
Secure, scaleable database for
peer to peer exchange of big
data and IOT sensor stream
tdx
QBrik
A modular highly secure physical
IOT product with trusted
hardware and IOT optimised
crypto
Picosec
Joint initiative with Oxford Uni
and CopperHorses to produce
secure optimised IOT stack
Trusted Data Exchange
A review of 22 IOT middleware
technologies judged webinos to
be the most secure
PRODUCTINITIATIVES

20. SOLUTION PACK
 AES-CTR MODE CCM
 ECDH (Elliptical Curve Diffie Hellman)
 Web based - Capability Tokens (in place of
XACML)
 Mutual Authenticated TLS
 PreShared PKI Certs
 OAuth 2.0
 FuseBits – Locked Bootloaders
 TPM and Secure Storage

21. PR
CISCO Top 15
IOT Company
Multiple sensors
deployed to
domestic
properties to
improve energy
and calculate
refurb costs
Open Data
Champion
Multiple sensors
deployed to
domestic
properties to
improve energy
and calculate
refurb costs
Future Cities
Contract
Multiple sensors
deployed to
domestic
properties to
improve energy
and calculate
refurb costs
BBC Coverage
Multiple sensors
deployed to
domestic
properties to
improve energy
and calculate
refurb costs
Open Data Champion
Future Cities

22. http://nquiringminds.com/resources/

23. @NQMINDS
NQMINDS.COM
nquiringminds