Need For Hardware Security Controls in IoT
•
0 likes•59 views
As IoT devices are deployed in physically exposed environments there is a need to protect the hardware. Medical IoT, Consumer IoT, Secure Smart Cities, Industrial IoT
Recommended
More Related Content
What's hot
What's hot (11)
Similar to Need For Hardware Security Controls in IoT
Similar to Need For Hardware Security Controls in IoT (20)
More from Niloufer Tamboly CISSP, CPA, CIA, CISA, CFE
More from Niloufer Tamboly CISSP, CPA, CIA, CISA, CFE (12)
Recently uploaded
Recently uploaded (20)
Need For Hardware Security Controls in IoT
- 1. The Need For Hardware Security Controls in IoT Niloufer Tamboly, CCSP, CISSP
- 2. I am a risk management professional and help companies prevent, detect and mitigate technology and business risks. I hold multiple certi cations in IT Security (CISSP), Audit (CISA, CIA) and Fraud (CFE). I am a Certi ed Public Account licensed to practice in the State of New Jersey. INTRODUCTION Niloufer Tamboly, CCSP, CISSP
- 3. AGENDA What is the need for security?01 02 03 04 What are the challenges? Why do we need hardware security controls? What controls should we have?
- 4. Examples Threats Data theft Pranksters Guage response time Failure threshhold Wearables Monitors Smart Home Consumer IoT
- 5. Examples Threats Information disclosure Organized crime/ competitors Loss of life due to wrong diagnosis Monitoring equipment Despensing pumps Implants Medical IoT
- 6. Examples Threats Distruction by nation state actors Hacktivist / malicious insider Terrorism Tra c lights and road sensors Digital outdoor of home displays Smart car / bus (head units) Smart Cities IoT
- 7. Examples Threats Distruction by nation state actors Against the drone / or attack misusing the drone Insider threat SCADA / Remote Terminal Units Drones Robotics Industrial IoT
- 8. WHY? Can be leveraged to launch further attacks Are vulnerable Can compromise privacy Can be used for reconnaissance
- 9. Challenges Not a business driver No uni ed standards Low Prices Resource Constraints
- 10. Why Do We Need Hardware Security Controls? Internal debug interfaces can be used to gain access Data/ rmware can be extracted for reverse engineering Malware can be injected to change functionality Devices deployed in physically exposed environment
- 11. Cryptography Bootloader to support FOA updates Security chips to store credentials and cryptographic info Hardware Security Controls Physically Uncloanable Devices Smart Fusion Field Programable Gate Array Trusted Platform Modules Authenticate and authorize Memory Protection Units Control access to memory locations