outsmarting the smart city - i.blackhat.com · outsmarting the smart city discovering and attacking...
TRANSCRIPT
![Page 1: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/1.jpg)
Outsmarting the Smart CityDISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS MODERN CITIES&
![Page 2: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/2.jpg)
2 Page
Researcher Bios
• Daniel Crowley (@dan_crowley)
• Research Baron at IBM X-Force Red
• Pen tester since 2004
• Locksport enthusiast and past competition winner
• Actually holds the title of Baron (in Sealand)
![Page 3: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/3.jpg)
3 Page
Researcher Bios
• Jennifer Savage (@savagejen)• Security Researcher at Threatcare• Black Hat review board member• Experience includes:
development vulnerability assessment vulnerability management penetration testing security research
![Page 4: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/4.jpg)
4 Page
Researcher Bios
• Mauro Paredes (@mauroparedes)
• Managing Consultant at IBM X-Force Red
• Passion for security flaws and their corrections
• Formerly developer, net/server admin, security architect
• Pen tester for many years
• 20+ years infosec experience in multiple industries
![Page 5: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/5.jpg)
5 Page
What kind of tech makes a city “smart”?
• Industrial Internet of Things
• Urban Automation
• Public Safety / Emergency Management
• Intelligent Transportation Systems
• Metropolitan Area Networks
![Page 6: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/6.jpg)
6 Page
Limited citizen privacy and risk management options
• You don’t have to buy an Alexa
• You can buy a non-smart TV
• You can buy a feature phone (or forego a cell phone)
• You can buy an ancient car
• Can you move to a city that isn’t “smart”?
![Page 7: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/7.jpg)
7 Page
V2I, V2V, OBD-III and DSRC
Connected vehicles communicate with each other, and with city infrastructure, as travel occurs.The proposed OBD-III standard raises privacy and due process concerns.
![Page 8: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/8.jpg)
8 Page
Hangzhou “City Brain”
“In China, people have less concern with privacy, which allows us to move faster”- Xian-Sheng Hua, manager of AI at Alibaba at World Summit AI in 2017
![Page 9: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/9.jpg)
9 Page
Smart streetlights with cameras
GE’s Bill Ruh says it’s up to each city to set policies around the datacollected by the sensors and how it can be used.
![Page 10: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/10.jpg)
10 Page
Facial recognition
In 2017 the former head of Singapore’s civil service Peter Ong said Singaporewants to deploy facial recognition technology to all 110,000 lampposts in the country.
![Page 11: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/11.jpg)
11 Page
Dubai robotic police force
“By 2030, we will have the first smart police station which won’t require human employees” -Brigadier Khalid Nasser Al Razouqi, Dubai Police’s general director of the Smart Services Department
![Page 12: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/12.jpg)
Reconnaissance
![Page 13: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/13.jpg)
13 Page
Search Engines
• Customer case studies
• News reports
• Smart City Open Data Initiatives
• Some city contracts are public by law Google: “purchase order” “smart device” site:gov
![Page 14: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/14.jpg)
14 Page
Public Systems Are Already Mapped
• IANA (Internet Assigned Numbers Authority) ranges
• Internet infrastructure search engines SHODAN Censys etc
![Page 15: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/15.jpg)
15 Page
Physical Recon
• Visual observation
• Wireless recon WiFi Monitor Unlicensed Bands Zigbee LoRaWAN
• Log off and go outside
![Page 16: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/16.jpg)
16 Page
Source Code Repositories
• Github
• Bitbucket
• Gitlab
• OSADP
![Page 17: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/17.jpg)
Case Study: Austin, TX
![Page 18: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/18.jpg)
18 Page
News Reports
“How Austin brought the human touch to smart city planning”
Digital Trends - July 31, 2017
“Austin, TX to test autonomous transit shuttles”
Smart Cities Dive - June 28, 2018
“Austin reinventing itself into a Smart City”
Austin Business Journal - Jul 30, 2017
“Austin is getting its own “smart” street”
The Architect’s Newspaper - August 23, 2017
“How Can Austin Achieve Smart City Status?”
KUT - Mar 14, 2017
![Page 19: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/19.jpg)
19 Page
Austin CityUP
![Page 20: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/20.jpg)
20 Page
From Internet scan data
![Page 21: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/21.jpg)
21 Page
From physical recon
![Page 22: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/22.jpg)
22 Page
From physical recon
![Page 23: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/23.jpg)
23 Page
From Google dorking
![Page 24: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/24.jpg)
Devices and Vulnerabilities
![Page 25: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/25.jpg)
Echelon i.LON SmartServer and i.LON 600
![Page 26: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/26.jpg)
26 Page
i.LON: What it does
• IP to ICS gateway LonTalk P-852 Modbus RTU Modbus / IP M-Bus SOAP/XML Web services BACnet / IP
![Page 27: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/27.jpg)
27 Page
Probably not OSHA-approved
![Page 28: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/28.jpg)
28 Page
i.LON SmartServer and i.LON 600
Default Web credentials
Default FTP credentials
Unauthenticated API calls (SmartServer only)
Plaintext communications
Authentication bypass
Cleartext password file on FTP
Replace binaries via FTP to execute code
Fiddle with ICS gear
Change IP address of i.LON
Gain access Do bad things
![Page 29: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/29.jpg)
29 Page
Authentication Bypass
![Page 30: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/30.jpg)
30 Page
Authentication Bypass
![Page 31: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/31.jpg)
31 Page
Authentication Bypass
• SmartServer vs 600 Security Access Mode
![Page 32: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/32.jpg)
32 Page
Leaked exploit from August 2015
![Page 33: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/33.jpg)
Battelle V2I Hub
![Page 34: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/34.jpg)
34 Page
V2I Hub: What it does
• Manages Vehicle to Infrastructure comms• Modular infrastructure
• Mostly SPaT (signal phase and timing) related
![Page 35: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/35.jpg)
35 Page
V2I Hub v2.5.1
Hard-coded admin account
Various API key issues
XSS
SQLi in API
Missing authentication
Track vehicles
Send false safety messages
Create traffic
…or just power it down
Gain access Do bad things
![Page 36: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/36.jpg)
36 Page
Unauthenticated shutdown script
![Page 37: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/37.jpg)
37 Page
API Authentication
![Page 38: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/38.jpg)
38 Page
PHP strcmp() weirdness
![Page 39: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/39.jpg)
39 Page
PHP strcmp() weirdness
![Page 40: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/40.jpg)
40 Page
PHP strcmp() weirdness
![Page 41: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/41.jpg)
41 Page
PHP strcmp() weirdness
![Page 42: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/42.jpg)
42 Page
PHP strcmp() weirdness
![Page 43: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/43.jpg)
43 Page
V2I Hub v3.0 SQL Injection
![Page 44: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/44.jpg)
Libelium Meshlium
![Page 45: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/45.jpg)
45 Page
Libelium Meshlium
Missing authentication
Shell command injection
Create false sensor data
Hide real sensor data
Gain access Do bad things
![Page 46: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/46.jpg)
46 Page
Pre-auth shell command injection
![Page 47: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/47.jpg)
DEMONSTRATION
![Page 48: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/48.jpg)
Implications
![Page 49: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/49.jpg)
49 Page
Surveillance of connected vehicles
![Page 50: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/50.jpg)
50 Page
Traffic manipulation
![Page 51: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/51.jpg)
51 Page
Sabotage disaster warning systems
![Page 52: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/52.jpg)
52 Page
Sabotage of industrial equipment and gateway
![Page 54: Outsmarting the Smart City - i.blackhat.com · Outsmarting the Smart City DISCOVERING AND ATTACKING THE TECHNOLOGY THAT RUNS ... • Daniel Crowley (@dan_crowley) • Research Baron](https://reader034.vdocument.in/reader034/viewer/2022042301/5ecbef8bfbce635cfe1744e8/html5/thumbnails/54.jpg)
ibm.com/security
securityintelligence.com
xforce.ibmcloud.com
@ibmsecurity
youtube/user/ibmsecuritysolutions
© Copyright IBM Corporation 2018. All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. Any statement of direction represents IBM's current intent, is subject to change or withdrawal, and represent only goals and objectives. IBM, the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others.
Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service or security measure can be completely effective in preventing improper use or access. IBM systems, products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products or services to be most effective. IBM does not warrant that any systems, products or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.
FOLLOW US ON:
THANK YOU
&