The document discusses several cybersecurity and cryptography projects in Wallonia, Belgium. It first describes the UserMEDIA and CryptoMEDIA projects, which focus on securing multimedia and media data storage in the cloud. It then discusses the needs of Walloon industrial structures for cryptography expertise in areas like e-voting and lightweight primitives. Finally, it examines the need for specific security mechanisms for internet of things (IoT) communication given constraints like low computer resources and the importance of securing IoT data transmission.
2. NETWORK ENGINEERING 2
• Wireless and local area networks
• System and network architectures
• Performance analysis and network audit
• IPv6 analysis and migration
• Mobile technologies
• Technical specifications
- CYBERSECURITY
- CRYPTO
- GDPR
New Developments :
4. USERMEDIA PROJECT 4
UserMEDIA : Research project portfolio in the field of multimedia contents
- Several universities and research centers
- In partnership with Walloon companies
Two specific projects :
- MédiMEDIA : Focused on the development of medical imaging techniques
- MEDIAFactory : Focused on new video techniques for digital cinema and television
Two transverse projects ;
- CloudMEDIA: Cloud platform for the exchange and processing of media content
- CryptoMEDIA: Securing of media data, especially in (and to) the cloud
5. WALLOON INDUSTRIAL STRUCTURE
• A few specialized enterprises
• BlueKrypt, Intopix, Barco Silex, etc.
Need of a high level expertise in cryptography
• E-voting, lightweight primitives, side-channel security…
• Many non specialized enterprises
• Minimization of cybersecurity problems
• No specific internal resources
Need of Cybersecurity awareness
Need to know what to do and who can be contacted
5
6. CRYPTOMEDIA: THREE HEADINGS
• Research & Development
• Protocol security (Université Catholique de Louvain)
• Implementation Security (Multitel)
• Technology advices and transfer
• Security In Design
• Open to any discussion with any company in the beginning of a new
development
• Raising awareness :
• Free workshops and seminars organization for
enterprises, public sector, and… citizen
6
8. WAL-E-CITIES 8
Citizen driven IoT solutions in mobility, energy
efficiency, governance and wellness. All these
developments are based on new wireless
communication channels using street furniture
and public lighting.
9. SMART TECHNOLOGIES AND CYBERSECURITY 9
Signal & Embedded Systems
Built-in intelligence
Wireless Sensor Network (WSN, LPWA)
Intelligent Transport Systems
Smart Grid
Data Management
Network Engineering
Wireless and Local Area Network
System and Network Architectures
Cybersecurity
Computer Vision
Intelligent Video Surveillance
Multimedia
Applied Photonics
Biochemical Sensors
LiFi Network
STRATEGIC PARTNERSHIP
10. Today concerns : Classical Cybersecurity
- Communication : VPN,...
- Servers : Firewalls, secure web applications,...
- Some specificities concerning IPv6
BUT :
Real lack of IoT communication security due to
- Rather specific
- Low computer resources for usual implementation
- Feeling of minor importance (futile data, actuators not taken into account,...)
- Still no "mediatic" exploit
CYBERSECURITY FOR IOT 10
11. - use of AES128
- Several encryption mechanism : Application, Network,... allowing authentication and
encryption with different levels
--> It seems secure…
EXAMPLE : LORA COMMUNICATION
11
12. • But !
– Air is a common resource
– Not really AES128 : it is only used for keystream generation followed by XORs
– -> Easy to replay messages for perturbation, DOS,...
– -> If there is a known message, keystreams can be recovered
• --> Specific (additional) cryptography must be assessed :
– Very small amount of data transmitted (a few bytes per... day) : RSA ??? -> Elliptic Curve
Cryptography (ECC),...
– Very low computer resources
– Specific format/size -> Format Preserving Encryption (FPE)
– Difficulty for accessing the sensors/actuators
– Secondary security verification (Geolocalisation,...)
– ...
NEED OF SPECIFIC SECURITY MECHANISMS 12
14. CYBERSEC & CRYPTOSEC 14
Collaboration between Research Center and Companies
- MULTITEL : Research Center
- THALES BELGIUM : Cybersecurity and data protection
- NSILITION : high-quality industrial circuits for communication
- BIION : Real time data management
- ...
Increase general knowledge and provide a *global offer* in Cybersecurity
15. CYBERSEC & CRYPTOSEC 15
Some short-term specific aspects :
- Risk analysis : Industry 4.0...
- Homologation and certification of systems : Smarcities !
- Simulation : Thales Cyberlab (see Workshop 3 for more details)
- Cybersecurity for Intelligent transport systems (ITS)
- Data security and integrity on specific fields (Pharmaceutical & medical)
- Development of security tools and components for Walloon companies
- …