IoT Security and Privacy – Sleep-Walking into a Living Nightmare?
-
Upload
david-rogers -
Category
Technology
-
view
2.566 -
download
0
Transcript of IoT Security and Privacy – Sleep-Walking into a Living Nightmare?
![Page 1: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/1.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved. 1
IoT Security and Privacy – Sleep-Walking into a Living Nightmare?
David Rogers, Copper Horse@drogersukIoTEdinburgh
24th March 2016
http://www.mobilephonesecurity.org
![Page 2: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/2.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Who is Connected to the Future Internet?
2
Source: http://cheezburger.com/8068370944
![Page 3: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/3.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Who is Connected to the Future Internet? (2)
3
Source: http://spectrum.ieee.org/computing/embedded-systems/on-the-internet-of-things-nobody-knows-youre-a-dog
![Page 4: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/4.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
What is Home Security?
4
![Page 5: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/5.jpg)
Copyright © 2015 Copper Horse Solutions Ltd. All rights reserved. 5
![Page 6: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/6.jpg)
Opening up Access to Who?
From: http://www.independent.co.uk/news/world/americas/hacker-takes-control-of-ohio-couples-baby-monitor-and-screams-bad-things-9296986.html Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved. 6
![Page 7: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/7.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Connected Lightbulbs
7
WiFi password can be extracted – pivot attack
![Page 8: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/8.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Connected Doorbell
8
WiFi password can be extracted – pivot attack / physical access
![Page 9: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/9.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Wireless Burglar Alarm
9
![Page 10: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/10.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Wireless Burglar Alarm Attack
10
Easily subverted by just removing batteries Solution was to reduce alarm alert time to 0 seconds!
– Home owner forced to use key-fob.
https://www.youtube.com/watch?v=WfSDUOBYUFE
![Page 11: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/11.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Samsung SmartThings Vulnerabilities
11
February 2016 – ZigBee flaws highlighted– Open locks by decrypting signals– Jamming– “Insecure rejoin”
There are other issues!
http://www.forbes.com/sites/thomasbrewster/2016/02/17/samsung-smartthings-vulnerabilities/#ed6d54a4e59d
![Page 12: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/12.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Smart TV Vulnerabilities
12
Privacy – voice control Webcams Software update issued
![Page 13: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/13.jpg)
Connected Pets
War Kitteh Denial of Service Dog
Copyright © 2015 Copper Horse Solutions Ltd. All rights reserved. 13
![Page 14: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/14.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Smart Meters
14
ZigBee, GSM – meter reading Profiling
![Page 15: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/15.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Other Devices
15
Radiator and home thermostats Kettles and kitchen appliances Garage door openers / detectors Garden, plant sensors and food dispensers White goods (e.g. washing machines) Etc!
![Page 16: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/16.jpg)
Copyright © 2013 Copper Horse Solutions Ltd. All rights reserved. 16
Counterfeit / Substandard Devices
![Page 17: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/17.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
Near Future Devices
17
Amazon Echo - Alexa
![Page 18: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/18.jpg)
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved. 18
Connected Home Updates?
![Page 19: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/19.jpg)
Samsung Smart TV Privacy Policy
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved.
221 pages! Plus other Terms, Nuance privacy policy etc.
![Page 20: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/20.jpg)
Plant / Critical Infrastructure
Copyright © 2015 Copper Horse Solutions Ltd. All rights reserved. 20
![Page 21: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/21.jpg)
Automotive (not just cars!)
Copyright © 2015 Copper Horse Solutions Ltd. All rights reserved. 21
![Page 22: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/22.jpg)
Copyright © 2013 Copper Horse Solutions Ltd. All rights reserved. 22
Make it Safe to Connect
https://iotsecurityfoundation.org/
![Page 23: IoT Security and Privacy – Sleep-Walking into a Living Nightmare?](https://reader035.fdocuments.in/reader035/viewer/2022070513/5887d01b1a28abeb738b6875/html5/thumbnails/23.jpg)
Thanks!
david.rogers [@] copperhorse.co.uk@drogersuk
@copperhorseuk
Copyright © 2016 Copper Horse Solutions Ltd. All rights reserved. 23