Fundamentals of Information Systems Security Lesson 2 The Internet of Things Is Changing How We Live

1. © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved. Page 1Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Fundamentals of Information
Systems Security
Lesson 2
The Internet of Things
Is Changing How We Live

2. Page 2Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Learning Objective(s)
 Explain information systems security and
its effect on people and businesses.

3. Page 3Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Key Concepts
 The evolution of the Internet of Things (IoT) from
the late 1990s to present
 The impact that the Internet and IoT have on
human and business life
 How bricks-and-mortar businesses transform into e-
business models with e-commerce and an IoT
strategy
 How IP mobility is driving IoT to include both
personal and business environments
 New challenges created by IoT

4. Page 4Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
The Internet of Things Is Changing
How We Live
Social Media
Facebook®
Twitter®
LinkedIn®
Pinterest®
Google+®
Instagram®
Mediums
VoIP
IM chat
Audio conference
Video conference
Collaboration
Digital Media

5. Page 5Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Drivers for Internet of Things
(IoT)
IP-based networking
Connectivity
Smaller and faster computing
Cloud computing
Data analytics

6. Page 6Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Evolution of IoT
 Internet service providers (ISPs)
 Radio frequency identification (RFID)
 Application service providers (ASPs)
 Software as a Service (SaaS)

7. Page 7Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
How the Internet and TCP/IP
Transform Our Lives

8. Page 8Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
IoT’s Impact on Human and
Business Life
The Internet has changed our day-to-day
lives
• Personally
• Socially
• Professionally
Use the Internet to:
• Check weather, news, and social media sites at
home
• Check business emails at work

9. Page 9Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Store-and-Forward vs. Real-Time
Communications
• Occurs instantaneouslyReal-time
• Acceptable delay in
transmitting communication
Store-and-
forward

10. Page 10Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
IoT’s Impact on Humans
Health monitoring and updating
Home security and smart home control systems
Online family member calendars
Near real-time tracking and monitoring via GPS
Online banking, bill paying, and financial transactions
Online e-commerce purchases

11. Page 11Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
IoT’s Impact on Business
Retail stores
Virtual workplace
Remote sensors
Traffic-monitoring applications
B2C service delivery model
“Anything as a Service” IoT applications

12. Page 12Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Evolution from Bricks and Mortar to
E-Commerce
 E-commerce
• Sale of goods and services on the Internet
 Business-to-consumer (B2C)
• Customers purchase goods and services directly from their
website
 Business-to-business (B2B)
• Businesses conduct sales with other businesses
 Payment Card Industry Data Security Standard (PCI
DSS)
• Protects private customer data

13. Page 13Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Evolution from Bricks and Mortar to
E-Commerce (cont.)
 Internet business challenges:
• Growing the business through the Internet
• Changing an existing conventional business into
an e-business
• Building secure and highly available websites and
e-commerce portals
• Building a web-enabled customer-service strategy
• Finding new customers with Internet marketing

14. Page 14Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
E-business Strategy Elements
E-commerce solution
Internet marketing strategy
E-customer service-delivery strategy
Payment and credit card transaction
processing

15. Page 15Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Why Businesses Must Have an
Internet and IoT Marketing Strategy
Must remain competitive
Bricks-and-mortar business model out of
date in global market
Customers require continuous access to
information, products, and services

16. Page 16Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
IP Mobility
 Personal communication devices and mobile
phones are powerful
 Cell phones are used to extend mobility
 Mobile phones, smartphones, and PDAs
match the power and flexibility of small
computers
 Tablets, smartphones, and netbooks fill need
for lightweight portable devices

17. Page 17Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Mobile Users and Bring Your
Own Device (BYOD)
 Employees and contractors use their own personal
devices to connect to network at office
Issues with Mobile Computing
• Network
• Usability
• Security

18. Page 18Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Mobile Applications
Limited web browsers can’t run some
traditional applications
Bad interface design causes application
failure on mobile devices
Many users from multiple domains found
uses for mobile applications
Medical applications were a good fit for
mobile applications

19. Page 19Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Mobile Applications (cont.)
4G networks provide true IP
communications
Mobile IP enables users to:
• Move between LAN segments and stay
connected without interruption
• Maintain a connection to the network as long
as the mobile device stays within network
coverage

20. Page 20Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
IP Mobile Communications
Mobile Node (MN)
Home Agent (HA)
Foreign Agent (FA)
Care of Address (COA)
Correspondent Node (CN)

21. Page 21Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
IP Mobile Communications (cont.)

22. Page 22Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
IP Mobile Communications (cont.)
1. Mobile node (MN) connects to foreign agent
(FA).
2. FA assigns care of address (COA) to MN.
3. FA sends COA to home agent (HA).
4. Correspondent node (CN) sends message to
MN.
a. CN’s message for MN goes first to HA.
b. HA forwards message to COA.
c. FA forwards message to MN.

23. Page 23Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
New Challenges Created by the IoT
Security Privacy Interoperability
Legal and
regulatory
compliance
E-commerce
and economic
dev issues

24. Page 24Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Security Challenges of IT Devices
 Deployed in large quantities (such as sensors or
consumer items)
 Ubiquitous and can have wide reach into the user or
household population
 Not maintained or updated devices allow
vulnerabilities
 Upgrades can be difficult to distribute and deploy
 No owner visibility of how the device connects to the
Internet
 Not physically secure
 Capture readings and measurements in the open

25. Page 25Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Privacy Challenges
 Privacy policy statement
 Definition of data, metadata, or analytical data
use and rights
 Ability for a user to provide consent to a
manufacturer’s or application service
provider’s privacy policy statement
 Determine the domain of privacy

26. Page 26Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Interoperability and Standards
Internet Engineering Task Force (IETF)
ensures interoperability and standards can
be pursued for IoT solutions
Interoperability has significant financial
impacts if not properly addressed
Goal is to bring the cost of IoT devices and
supporting applications down so they are
affordable

27. Page 27Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Interoperability and Standards
Challenges
 Some manufacturers want to design and deploy
proprietary IoT devices and solutions
 Cost factors to implement functional, operational,
technical, and security capabilities into IoT
devices and applications
 Time-to-market risk
 Technology outdated risk
 A void in interoperability and standards for IoT
devices can create an environment of bad IoT
devices

28. Page 28Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Legal and Regulatory Issues
Proper handling and protection of sensitive
data
Privacy data subject to privacy laws of state
you live in as well as state that the IoT
hosting company resides in
IoT vendor or solutions provider required to
adhere to security control requirements and
data protection laws

29. Page 29Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Legal and Regulatory IoT Questions
Who is collecting data?
Who is collecting behavior patterns?
Are they selling this data?
Do they have the right to sell it?
Is there liability associated with the data?

30. Page 30Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
E-Commerce
and
Economic
Development
Issues
Infrastructur
e resources
Foundational
investments
Technical and
industry
development
Policy and
regulatory
definitions

31. Page 31Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Summary
 The evolution of the Internet of Things (IoT)
from the late 1990s to present
 The impact that the Internet and IoT have on
human and business life
 How bricks-and-mortar businesses transform
into e-business models with e-commerce and
an IoT strategy
 How IP mobility is driving IoT to include both
personal and business environments
 New challenges created by IoT