IoT Security Aspect

1. Things Security
July 2015
Prepared and presented by Dony Riyanto
Powered by:

2. AGENDA
• Introduction
• What and Where
• Basic of Infosec
• Entities & Transport Layer
• Type of attacks
• Demo

3. What and Where (1)
Well known boards:
• Arduino family
• Raspberry Pi
• Beaglebone
• Galileo & Edison
• Odroid
• Many more

4. What and Where (1)

5. Basic of Infosec
• Confidentiality
• Integrity
• Availability
https://en.wikipedia.org/wiki/Information_security

6. Entities and Layers
What to protects?
• Data
• Control
• Enough?
When?
• Acquiring
• Storing
• Transporting
• Processing
How we transport?
• Local network
• Private over public
• Host to host leased line
• Public network
Questions to ask:
• How important security
for your projects/org?
• Do you really need to store it?
• Anonymize earlier or later?
When we talk
about IoT, physical
access does
mater…

7. Some Sorts of Attack
A. Physical Attack, ASIC/hardware hacking , Mal firmware/ Spy firmware
B. Man In The Middle/injection, Jammer
C. Network firmware / Router attack
D. DDOS, Gain control, Scam/Phishing/Redirection
E. Data center security breach, Man In The Middle, Injection
F. Data center security breach, scam/fraud
A
B
C
D E
G

8. *News
http://investors.proofpoint.com/releasedetail.cfm?ReleaseID=819799

9. Case Study
Bikin stasiun cuaca dan sensor tanah untuk area ladang jagung yang
tersebar di 120HA
Tantangan:
- Gabungan dari berbagai sensor, menyebabkan harus ada sensor
yang berada ditanah, ditengah (memudahkan pemasangan) dan
tinggi (pengirim sinyal wifi)
- Tidak ada/sulit listrik (PLN)
- Kondisi musim hujan (minim intensitas matahari) namun harus
mengambil data akurat near realtime
- Unit harus ekonomis (terjangkau petani), tetapi juga harus aman.
Jangan sampai di ‘colong’ maling/orang tidak bertanggungjawab
- Dsb

10. Bonus :)
• DIY Home Electricity Relay
• Bikin relay listrik sederhana menggunakan
bahan-bahan listrik yang umum di toko listrik
+ arduino nano
• Pengembangan lebih lanjut bisa dipasang
PIR/temper sensor atau WiFi module untuk
koneksi/report jarak jauh

11. Thank You