AWS Dev Day 資料: IoT におけるセキュリティ

1. IoT

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
SIer
AWS

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Agenda
IoT
AWS
AWS IoT Core
AWS IoT Device Management
AWS IoT Device Defender
Amazon FreeRTOS

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT
IoT

5. IoT

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT
Web

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT
DoS
Web

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
:
IoT

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
:
IoT

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
:

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT
PC
/
LPWAN
LAN
Bluetooth

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
1

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

23. AWS

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT
) (
W I
T
I S
Endpoints
Gateway
AWS IoT
Device
Defender
AWS IoT
Analytics
AWS IoT
Device SDK
AWS IoT
Core
AWS IoT
Device
Management
Amazon
FreeRTOS
AWS
Greengrass
Device

25. AWS
AWS IoT Core

26. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Core
AWS IoT Core IoT

27. •
AWS SigV4
•
AWS IoT Core
CA
• IoT
• ID
• API MQTT
AWS

28. AWS IoT•
AWS SigV4
•
AWS IoT Core
CA
• IoT
• ID
• API MQTT

29. AWS
AWS IoT Device Management

30. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Device Management

31. •
•
•
•
•

32. AWSIoT
()
S
() 1 0 1 )
1. (1
S
=
<
1
2
3
4
5
6
7()
8
•
•
•
•
•

33. {
"PlatformSoftwareToUpdate": "core",
"Architecture": "aarch64",
"OperatingSystem": "ubuntu",
"ArtifactSize": 8521513,
"ArtifactMD5Hash":
"f901ed3d5d430e4360aab7b88bae6188",
"ArtifactUrl": "${aws:iot:s3-presigned-
url:https://us-east-1-greengrass-
updates.s3.amazonaws.com/core/ubuntu/aarc
h64/greengrass-core-ubuntu-aarch64-
1.6.0.tar.gz}",
"LogLevel": "INFO"
}
•
•
•
•
•

34. •
•
•
•
•

35. AWS
AWS IoT Device Defender

36. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Device Defender
IoT

37. • AWS IoT
•
•
•
scheduled
Ad-hoc
IoT

38. • AWS IoT
•
•
•
IoT
• CA
• CA
•
•
•
AWS IoT
• ID
• IoT
• Cognito
• Cognito
•

39. •
•
•
•
AWS Greengrass / Amazon FreeRTOS

40. • TCP/UDP
• TCP/UDP
• TCP
•
•
• IP
•
•
• IP
•
•
•
•
•
AWS Greengrass / Amazon FreeRTOS

41. •
•
•
•
AWS Greengrass / Amazon FreeRTOS

42. AWS
Amazon FreeRTOS

43. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon FreeRTOS
FreeRTOS
OS
OS
OTA
AWS Greengrass AWS IoT Core

44. •
OS
• CPU 25MHz
RAM 64KB
• 15
• MIT
•

45. FreeRTOS
MQTT
Shadow
Green
grass
Discovery
WiFi OTA
Amazon FreeRTOS
•
OS
• CPU 25MHz
RAM 64KB
• 15
• MIT
•

46. ARM
•
OS
• CPU 25MHz
RAM 64KB
• 15
• MIT
•

47. • TLS
•
•
•
PKCS#11
•
•

48. •
•
•
OTA

49. •
•
•
OTA

50. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT
Device
Defender
AWS IoT Core
AWS IoT
Device
Management

51. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
10/31( ) 11:20~ Serverless Application Security on AWS
11/1( ) 15:20~ Data Lake Security on AWS
IoT
11/1( ) 14:00~ IoT
IT
10/30( ) 14:00~ Threat Detection and Remediation on AWS

52. Thank you