The document discusses security issues with IoT devices. It defines IoT as interconnected devices that transfer data over a network without human interaction. It outlines risks like a lack of authentication, encryption, and vulnerabilities that could allow unauthorized access to personal data or critical infrastructure. The document also notes that IoT devices are increasingly being used in cyber attacks and that security standards need to evolve as more things become connected.

1. Security of IoT Devices
Submitted By :
Name- Mayank Pandey
UID- 16BCA1076
Branch- BCA
28-09-2017
Submitted To:
Ms Navdeep Kaur
1

2. Security of IoT
• What is IoT (Internet of Things)?
• Risk in IoT devices
• Security Weaknesses and Cyber Threats
• Under attack
• Evolution
• Conclusions
28-09-2017 2

3. Introduction
The Internet of Things (IoT)
is a system of interrelated
computing devices,
mechanical and digital
machines, objects, animals or
people that are provided
with unique identifiers and the
ability to transfer data over a
network without requiring
human-to-human or human-
to-computer interaction.
28-09-2017 3

4. Risk in IoT Devices
•Wearable devices collect a huge amount of
personal data as well as surrounding
environment information.
•Significant impact on privacy rights of these
technologies will require a careful review.
•Great concern for Health-related sensitive
data (i.e. Medical devices and fitness apps).
•Confidential information and easily disclose it
to third parties.
•A Threat for enterprise perimeter.
28-09-2017 4

5. Security weakness & Cyber Threats
1. Insecure Web Interface
2. Insufficient Authentication/Authorization
3. Insecure Network Services
4. Lack of Transport Encryption
5. Insecure Cloud Interface
6. Insecure Mobile Interface
7. Insufficient Security Configurability
8. Insecure Software/Firmware
9. Poor Physical Security
28-09-2017 5

6. Under Attack
• Proofpoint discovered more Than 750,000 Phishing
and SPAM Emails Launched From “Thing bots”
thing Bots could be used in an attack against a
critical infrastructure from anywhere in the globe
• Akamai spotted a Spike malware which is used to
run DDoS attacks through desktops and IoT devices.
• POC with Samsung Gear Live smartwatch and
Google Nexus 4
• 8 million smart meters are deployed in Spain (30
percent of households).
28-09-2017 6

7. • Data collection, retention, and
destruction policies
• Device and system vulnerability
assessment
• Employee training on IoT
privacy practices
• Regularly updated consumer
privacy rules
• Uniform cybersecurity
standards and policies
28-09-2017 7
Evolution
28-09-2017

8. • We’re rapidly evolving toward a world where just about everything
will be connected.
• Privacy and security must be addressed.
• Growing Business opportunity for startup and big companies.
• Number of cyber attacks will rapidly increase.
• IoT devices are a privileged target as highlighted recently by the
Europol, the European agency citing a December 2017 report by US
security firm IID, warned of the first murder via “hacked internet-
connected device” by the end of 2018.”
28-09-2017 8
Conclusion
28-09-2017

9. 28-09-2017 9

10. Reference example
• http://usblogs.pwc.com/emerging-technology/evolution-of-iot-is-security/
• https://mapr.com/blog/tutorial-fast-path-iot-proof-concept/
• https://www.slideshare.net/TerryFagen/iot-and-physical-security-of-
medical-devices?qid=9f826f6c-c3e1-4468-a8bb-
02b03d157939&v=&b=&from_search=6
• https://www.google.com
28-09-2017 10