INTERNET OF THINGS
2 LEARNING OUTCOMES
Explain about characteristic of IoT
Differentiate between M2M and IoT
Explain several examples of application of IoT
Identify IoT technologies
Identify challenges in IoT
3
INTRODUCTION TO IOT
Kupat Tahu Presentation
4
What is IoT
Network of Physical Objects
Internet of Things (IoT) comprises things that have unique identities and are
connected to the Internet
The focus on IoT is in the configuration, control and networking via the Internet
of devices or “Things” that are traditionally not associated with the internet
Eg: pump, utility meter, car engine
IoT is a new revolution in the capabilities of the endpoints that are connected to
the internet
5
What is IoT
Network of Physical Objects
The Scope of IoT is not limited to just connecting things (device, appliances,
machines) to the Internet
IoT allows these things to communicate and exchange data (control&
information)
Processing on these data will provide us various applications towards a common
user or machine goal
Idea: Move from Internet of People Internet of Things 6
Internet appears everywhere in the world Internet of Things is a plan to connect things also
It is primarily connection between people using the same medium
Internet of Things - Evolution 7
8
Difference between M2M and IoT 9
10 IOT: People connecting with Things
ECG sensor
Internet
Motion sensor
Motion sensor
Motion sensor
11 IoT: Things connecting with Things
- Complex and heterogeneous
resources and networks
12 Unlocking the Massive potential of IoT
13 Looming Opportunity
14
APPLICATIONS OF IOT
15 IoT Applications : Intelligent Home
16 Smart home
Information Security
Office of Budget and Finance
Education – Partnership – Solutions
18
19
20
21
22
23
24
25
26
27 IoT Applications : Transportation
28
Supply Chain Management
Logistic
Product Design
Warehouse
Manufacturing
29 IoT Architecture
Integrated Application Smart Grid Green Building Smart Transport Env. Monitor
Information Processing Data Center Search Engine Smart Decision Info. Security Data Mining
WWAN WMAN
Network Construction
Internet
WPAN WLAN
Sensing & Identification GPS Smart Device RFID Sensor Sensor
30
IOT TECHNOLOGIES
Kupat Tahu Presentation
IoT Technologies 31
Hardware (Device)
Communication Technology
Protocols for IoT
Software (IDE)
Cloud Platforms
32
Challenges of IoT
Connectivity
Power Management
Security
Rapid Evolution
https://www.youtube.com/watch?v=z72G4WXQ_IY
Security :Why be concerned about IoT?
It’s just another computer, right?
• All of the same issues we have with access
control, vulnerability management, patching,
monitoring, etc.
• Imagine your network with 1,000,000 more
devices
• Any compromised device is a foothold on the
network
Does IoT add additional risk?
• Are highly portable devices captured during vulnerability scans?
• Where is your network perimeter?
• Are consumer devices being used in areas – like health care – where
reliability is critical?
• Do users install device management software on other computers? Is
that another attack vector?
Attacking IoT
• Default, weak, and hardcoded credentials
• Difficult to update firmware and OS
• Lack of vendor support for repairing vulnerabilities
• Vulnerable web interfaces (SQL injection, XSS)
• Coding errors (buffer overflow)
• Clear text protocols and unnecessary open ports
• DoS / DDoS
• Physical theft and tampering
Case Study: Trane
• Connected thermostat vulnerabilities detected by Cisco’s Talos group allowed
foothold into network
• 12 months to publish fixes for 2 vulnerabilities
• 21 months to publish fix for 1 vulnerability
• Device owners may not be aware of fixes, or have the skill to install updates
Case Study: Lessons Learned
• All software can contain vulnerabilities
• Public not informed for months
• Vendors may delay or ignore issues
• Product lifecycles and end-of-support
• Patching IoT devices may not scale in large environments
Recommendations
Accommodate IoT with existing practices:
• Policies, Procedures, & Standards
• Awareness Training
• Risk Management
• Vulnerability Management
• Forensics
Recommendations
• Strengthen partnerships with researchers,
vendors, and procurement department
Threat vs. Opportunity
• If misunderstood and misconfigured, IoT poses risk to our
data, privacy, and safety
• If understood and secured, IoT will enhance
communications, lifestyle, and delivery of services
41
Thank you !
42
Source
www.kayarvizhy.com
www.utdallas.edu/infosecurity
