This document summarizes the key IoT security challenges discussed at an IoT security research day. It outlines the common IoT architecture of devices, routers, hubs and cloud connections. It notes that most real IoT networks do not use IP, instead using protocols like 802.15.4 and LoRa. The top 10 IoT security challenges discussed are encryption performance and footprint, encryption over networks, storage of secrets, tamper proofing devices, vulnerability of hubs, provenance of data, auditing access, permissioning, revocation and sharing. Background information provided includes a trusted execution environment, web application security models, peer reviews of IoT middleware security and a joint project between a company and Oxford University addressing

1. nquiringminds
Summary of Key IOT Security Challenges
IoTUK Security Thematic Research Day 1/3/16
Dr Nicholas Allott

2. IOTCOMPONENTS
Switch IOT Router
Bulb
Cloud
Almost ALL IOT deployments
follow this same basic
architecture

3. IOTNEWORKS
Switch IOT Router
Bulb
Cloud
NONIPIPNETWORK
Most real IOT
networks do not
support IP.
802.15.4, LoRa,
SigFox etc.
IP cloud network
could be over fixed
or mobile. Note
mobile can have
different
connectivity
constraints.
Domestic WIFI can
be tricky

4. IOTCONNECTIITY
SCENARIOS
Switch IOT Router
Bulb
Cloud
Local Wifi
Need consistency of
naming/addressing, and
transparent routing in all
scenarios
I want to turn on my lightbulb
from my mobile application, at
work, my mobile application
from home or from built in
switch

5. TOP10IOTSECURTY
CHALLENGES
1 ENCRYPTION – FOOTPRINT, PERFORMANCE
2 ENCRYPTION - NETWORK
3 STORAGE OF SECRETS
4 TAMPER PROOFING IOT DEVICE
5 VUNERABILITY OF IOT HUB – MULTI LEGGED
6 PROVENANCE OF DATA
7 AUDITING OF ACCESS
8 PERMISSIONING
9 REVOCATION
10 SHARING

6. SECURITY
BACKGROUND
Trusted Execution Environment TR1/0
Web Application Security Model: W3C/ DAP. WoT Groups
Peer review Most Secure 22 IOT Middleware's –Open Source
Joint project IOT Security University Oxford
Released product addressing “most” of issues raised

7. COMPANY
BACKGROUND
CUSTOMERS AWARDS
pioneers TOP 15
IOT
Parlimentary Nomination
For Innovation
Future Cities
Data Integration

8. nquiringminds
@nqminds
www.nqminds.com