Vladislav Iliushin: Dark side of IoT

43

Transcript of Vladislav Iliushin: Dark side of IoT

Page 1: Vladislav Iliushin: Dark side of IoT
Page 2: Vladislav Iliushin: Dark side of IoT

Vladislav Iliushin

@iliusvla

[email protected]

#darksideofiot

Page 3: Vladislav Iliushin: Dark side of IoT

Number of Connected Devices is Growing Dramatically

Internet of Things (IoT)connected deviced installedbase worldwide from2015 to 2025 (in billions)

Source: IHS © Statista 2017

Page 4: Vladislav Iliushin: Dark side of IoT

Number of Connected Devices is Growing Dramatically

Internet of Things (IoT)connected deviced installedbase worldwide from2015 to 2025 (in billions)

Source: IHS © Statista 2017

Mirai botnet

Page 5: Vladislav Iliushin: Dark side of IoT

Humans

Page 6: Vladislav Iliushin: Dark side of IoT

Knocker-upper?

Page 7: Vladislav Iliushin: Dark side of IoT

1900

Page 8: Vladislav Iliushin: Dark side of IoT

1990 2017

Page 9: Vladislav Iliushin: Dark side of IoT

Automation

Page 10: Vladislav Iliushin: Dark side of IoT

2000~361M devices

Page 11: Vladislav Iliushin: Dark side of IoT

2017~2.3B devices

Page 12: Vladislav Iliushin: Dark side of IoT

New Threats Every Year

Page 13: Vladislav Iliushin: Dark side of IoT

Malwaretising

Page 14: Vladislav Iliushin: Dark side of IoT
Page 15: Vladislav Iliushin: Dark side of IoT
Page 16: Vladislav Iliushin: Dark side of IoT
Page 17: Vladislav Iliushin: Dark side of IoT
Page 18: Vladislav Iliushin: Dark side of IoT

BarcelonaWi-Fi

Page 19: Vladislav Iliushin: Dark side of IoT

“Free” Wi-Fi

2K+ 61% 5

Page 20: Vladislav Iliushin: Dark side of IoT
Page 21: Vladislav Iliushin: Dark side of IoT
Page 22: Vladislav Iliushin: Dark side of IoT
Page 23: Vladislav Iliushin: Dark side of IoT
Page 24: Vladislav Iliushin: Dark side of IoT
Page 25: Vladislav Iliushin: Dark side of IoT

Medicine

Page 26: Vladislav Iliushin: Dark side of IoT

Poison

Page 27: Vladislav Iliushin: Dark side of IoT

Reality

UnprotectedAppliances

Page 28: Vladislav Iliushin: Dark side of IoT
Page 29: Vladislav Iliushin: Dark side of IoT

{"system":{"get_sysinfo":{}}}

Page 30: Vladislav Iliushin: Dark side of IoT

{"err_code": 0, "sw_ver": "1.1.0 Build 160503 Rel.145047", "hw_ver": "1.0", "type": "IOT.SMARTPLUGSWITCH", "model": "HS100(EU)", "mac": "50:C7:BF:XX:XX:XX", "deviceId": ”XXXXXXXXXXX", "hwId": ”YYYYYY", "fwId": ”ZZZZZZZZ", "oemId": ”AAAAAAAAAAAAAAAAAA", "alias": "My Smart Plug", "dev_name": "Wi-Fi Smart Plug", "icon_hash": "", "relay_state": 0, "on_time": 0, "active_mode": "schedule", "feature": "TIM", "updating": 0, "rssi": -56, "led_off": 0, "latitude": 50.052515, "longitude": 14.4435

}

Page 31: Vladislav Iliushin: Dark side of IoT
Page 32: Vladislav Iliushin: Dark side of IoT
Page 33: Vladislav Iliushin: Dark side of IoT
Page 34: Vladislav Iliushin: Dark side of IoT

Ordinary router with SSH

Page 35: Vladislav Iliushin: Dark side of IoT

Wireless speaker with exposed API

Page 36: Vladislav Iliushin: Dark side of IoT

Personal Assistant

Page 37: Vladislav Iliushin: Dark side of IoT

Ordinary network camera

Page 38: Vladislav Iliushin: Dark side of IoT

Almost…

Page 39: Vladislav Iliushin: Dark side of IoT
Page 40: Vladislav Iliushin: Dark side of IoT

>3000000vulnerabledevices

Page 41: Vladislav Iliushin: Dark side of IoT

Humans

Source: https://www.vox.com/a/explain-food-america

0,00%

5,00%

10,00%

15,00%

20,00%

25,00%

30,00%

35,00%

40,00%

Vulnerabilities

Page 42: Vladislav Iliushin: Dark side of IoT

Let’s Hack a Drone

Page 43: Vladislav Iliushin: Dark side of IoT

Vladislav Iliushin

@iliusvla

[email protected]

#darksideofiot