Overview of the internet of things features and security challenges and solutions

1. Internet of things security
challenges

2. Plan
• Introduction
• What is Internet of things?
• IOT Security
• IOT security solutions
• Conclusion
11/12/2017 2/19

3. Introduction
11/12/2017 3/19

4. What is Internet of things?
• The interconnection via the Internet of computing devices embedded
in everyday objects, enabling them to send and receive data.
[Oxford Online Dictionary]
• The networking capability that allows information to be sent to and
received from objects and devices using the Internet
[Merriam-Webster Dictionary]
11/12/2017 4/19

5. What is Internet of things?
11/12/2017 5/19

6. What is Internet of things?
11/12/2017 6/19

7. ‘if one thing can prevent the Internet of things from
transforming the way we live and work, it will be a
breakdown in security’
Oxford Dictionary
11/12/2017 7/19

8. IOT Security
• IOT Features
• IOT Layers
• IOT Security and Privacy requirements
• Cryptographic primitives goals and attack techniques
11/12/2017 8/19

9. IOT Features
• Uncontrolled Environment
• Mobility
• Physical Accessibility
• Heterogeneity
• Trust
• Scalability
• Constrained resources
11/12/2017 9/19

10. IOT Layers
11/12/2017 10/19

11. IOT Security and Privacy requirements
• Network Security
• Privacy
• Identity Management
• Resilience
11/12/2017 11/19

12. Cryptographic Primitives goals & Attack
techniques
• Confidentiality  Impersonation, replay attack
• Integrity  Man-In-The-Middle attack
• Availability  Denial of Service attack, Jamming, …
11/12/2017 12/19

13. IOT security solutions
• Centralized approaches
• Protocol-based extensions and optimizations
• Delegation-based approach
• Hardware-based approach
11/12/2017 13/19

14. Centralized approach
• Suitable for the resource-constrained network
• Central entity serves as key distributor
• Nodes pre-configuration with shared keys
• Scalability of Key management
• Availability of Key distributor
11/12/2017 14/19

15. Protocol-based extensions and optimizations
• Header compression
• Reduce the overhead of packets
• Caching Certificate informations
11/12/2017 15/19

16. Delegation-based approach
• Public-Key-based operations involved in session establishments
• Server Based Certificate Validation Protocol (SCVP)
• Trusted Server
11/12/2017 16/19

17. Hardware-based approach
• Additional hardware security models
• Trusted Platform Model (TPM)
• Support cryptographic computations
• Holds keys in a protected memory area
11/12/2017 17/19

18. Conclusion
• Internet of Things is a M2M communication
• Different Properties than traditional networks
• Security and privacy challenges
• Many solutions are employed
11/12/2017 18/19

19. Thank You