IoT Device Security

1. Security of IoT Devices
Submitted By :
Name- Mayank Pandey
UID- 16BCA1076
Branch- BCA
28-09-2017
Submitted To:
Ms Navdeep Kaur
1

2. Security of IoT
• What is IoT (Internet of Things)?
• Risk in IoT devices
• Security Weaknesses and Cyber Threats
• Under attack
• Evolution
• Conclusions
28-09-2017 2

3. Introduction
The Internet of Things (IoT)
is a system of interrelated
computing devices,
mechanical and digital
machines, objects, animals or
people that are provided
with unique identifiers and the
ability to transfer data over a
network without requiring
human-to-human or human-
to-computer interaction.
28-09-2017 3

4. Risk in IoT Devices
•Wearable devices collect a huge amount of
personal data as well as surrounding
environment information.
•Significant impact on privacy rights of these
technologies will require a careful review.
•Great concern for Health-related sensitive
data (i.e. Medical devices and fitness apps).
•Confidential information and easily disclose it
to third parties.
•A Threat for enterprise perimeter.
28-09-2017 4

5. Security weakness & Cyber Threats
1. Insecure Web Interface
2. Insufficient Authentication/Authorization
3. Insecure Network Services
4. Lack of Transport Encryption
5. Insecure Cloud Interface
6. Insecure Mobile Interface
7. Insufficient Security Configurability
8. Insecure Software/Firmware
9. Poor Physical Security
28-09-2017 5

6. Under Attack
• Proofpoint discovered more Than 750,000 Phishing
and SPAM Emails Launched From “Thing bots”
thing Bots could be used in an attack against a
critical infrastructure from anywhere in the globe
• Akamai spotted a Spike malware which is used to
run DDoS attacks through desktops and IoT devices.
• POC with Samsung Gear Live smartwatch and
Google Nexus 4
• 8 million smart meters are deployed in Spain (30
percent of households).
28-09-2017 6

7. • Data collection, retention, and
destruction policies
• Device and system vulnerability
assessment
• Employee training on IoT
privacy practices
• Regularly updated consumer
privacy rules
• Uniform cybersecurity
standards and policies
28-09-2017 7
Evolution
28-09-2017

8. • We’re rapidly evolving toward a world where just about everything
will be connected.
• Privacy and security must be addressed.
• Growing Business opportunity for startup and big companies.
• Number of cyber attacks will rapidly increase.
• IoT devices are a privileged target as highlighted recently by the
Europol, the European agency citing a December 2017 report by US
security firm IID, warned of the first murder via “hacked internet-
connected device” by the end of 2018.”
28-09-2017 8
Conclusion
28-09-2017

9. 28-09-2017 9

10. Reference example
• http://usblogs.pwc.com/emerging-technology/evolution-of-iot-is-security/
• https://mapr.com/blog/tutorial-fast-path-iot-proof-concept/
• https://www.slideshare.net/TerryFagen/iot-and-physical-security-of-
medical-devices?qid=9f826f6c-c3e1-4468-a8bb-
02b03d157939&v=&b=&from_search=6
• https://www.google.com
28-09-2017 10