Upload File

security and privacy in the internet of things · scanner traffic filter threat detector filtering...

  • Home
  • Documents
  • Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
56
Security and Privacy in the Internet of Things Jelte Jansen | SIDN Connect 30 november 2017

Upload: others

Post on 05-Jul-2020

1 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Security and Privacyin the Internet of Things

Jelte Jansen | SIDN Connect

30 november 2017

Page 2: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 3: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Smart Devices“A smart device is an electronic device, [snip],that can operate to some extent interactivelyand autonomously.”

Source: Wikipedia

Page 4: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 5: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 6: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 7: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 8: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 9: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Measures: * How long it took to eat your meal.* The amount of "fork servings" taken per minute.* Intervals between "fork servings".

This information is then uploaded via USB or Bluetooth to your Online Dashboard

Page 10: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 11: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 12: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

With “Waistline Trend Analysis”!

Page 13: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 14: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Absolutely! All data will be kept anonymous but users will have the option to share their recent data with friends, or, indeed the world. You will be able to anonymously access stats that you can compare with i.Con users worldwide.

What does i.Con do with its data? Can I use it anonymously?

Page 15: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 16: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 17: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 18: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 19: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology
Page 20: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

8.4 BillionDevices connected to the Internet in 2017

Source: Gartner (January 2017)

Page 21: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

20 Billionin 2020

Page 22: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

So, about that IoT

Page 23: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

What is the IoT?

Wikipedia definition:

“The Internet of things (IoT) is the inter-networking of physical devices, vehicles (also referred to as "connected devices" and "smart devices"), buildings, and other items embedded with electronics, software, sensors, actuators, and network connectivity which enable these objects to collect and exchange data.”

Page 24: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

What is the IoT?

Global Standards Initiative definition:

“a global infrastructure for the information society, enabling advanced services by interconnecting (physical and virtual) things based on existing and evolving interoperable information and communication technologies"[3] and for these purposes a "thing" is "an object of the physical world (physical things) or the information world (virtual things), which is capable of being identified and integrated into communication networks".”

Page 25: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

What is the IoT?

• IEEE published a document: “Towards a definition of the IoT”

• Only 86 pages!

Page 26: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

What is the IoT?

A simpler definition:

“Stuff that did not use to be networked”

Page 27: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

What is the IoT?

An even simpler definition:

“One big mess”

Page 28: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

So, about that IoT

Page 29: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Attributed to @tkadlec

Page 30: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

The S in IoT

• Devices with security holes• Devices are not updated• Devices have no, or bad passwords• Devices don’t encrypt data• Devices leak sensitive data such as wifi passwords• The list goes on and on

Page 31: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Why is that?

• Security is hard• Security is expensive• In some cases: security is not ‘userfriendly’• Security is not a feature that sells devices

Time to market and price are

• Security is invisible

Page 32: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

The effects of lack of security

Page 33: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

The 2016 Dyn attack

1.2 TbpsFrom ‘only’ 100.000 devices

vs.Mirai

Page 34: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

The 2016 Dyn attack

Page 35: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Some ways to protect against DDoS

• Overprovision• Hide behind ‘protection service’• Install big packet scrubbers• Work closely with networking peers to

blackhole attack data

Page 36: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

But what about preventing DDoS?

• “Let market fix it”

Page 37: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

But will it?

"The market can't fix this because neither the buyer nor the seller cares.

The owners of the webcams and DVRs used in the denial-of-service attacks don't care.

Their devices were cheap to buy, they still work, and they don't know any of the victims

of the attacks.

The sellers of those devices don't care: They're now selling newer and

better models, and the original buyers only cared about price and

features.

There is no market solution, because the insecurity is what economists

call an externality: It's an effect of the purchasing decision that

affects other people. Think of it kind of like invisible pollution."

https://www.schneier.com/blog/archives/2017/02/security_and_th.html

Page 38: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Some users may care a bit

Page 39: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Some users may care a bit

Page 40: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Some users may care a bit

Page 41: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

What should we do?

• Better practices for manufacturers?• Free secure software stacks?• International policy, regulation, certificiation?• Clear up accountability issues?• Generate market demand for secure products?• Quarantine bad actors (e.g. at ISP)?• Educate users?• Empower users?

“Yes”We need to do it all

Page 42: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Protect home networks

Focus on one today:

Page 43: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

How to protect home networks?

• Home networks notoriously insecure• Many different devices and device types• There will always be bad devices and computers

Page 44: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Quarantined by ISP

• “Reinstall Windows”

• 15-20 devices connected at any time

• None of them run windows.

Page 45: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

How to protect home networks?

• Lowest common denominator: IP• So, firewall?• We need something better

Page 46: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

The Dream

Open home security platform: open source, open standards

Automatic operation: guards and automatically blocks devices

Privacy friendly: runs locally, does not process application-level data

User-centric: automatic, but allow for ‘power-use’

Enables new business models: network-level system w/ well-defined APIs

Page 47: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

The SPIN project at SIDN Labs

• Security and Privacy for In-home Networks

• Research and prototype SPIN functions:• Visualise network traffic• Automatically block unwanted traffic/infected devices• Allow ‘good’ traffic• Scan devices• Sharing platform for device info

Page 48: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

The SPIN project at SIDN Labs

• Open source in-home router/AP software that• Helps protecting DNS operators (like SIDN!) and other service

provides from IoT-powered DDoS attacks• Helps end-users control their security and privacy in the IoT• All processing done locally, no VPN, no enforced cloud

Page 49: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

High-level view

TrafficCapturer

DeviceScanner

TrafficFilter

ThreatDetector

FilteringDP

Applica ons(BlockingNo fier,TopologyBrowser,SharingApplica on)

PCAP

TopologyDatabase

eventPa ern

DatabasePolicy

Database

SPINService

OtherSPINSystem

D1àT

D1ßA

T

A

PacketForwarder

Communityofsecurity

researchers topologychanges(SPINprotocol)

SPINpolicycommunity

edit

importimport

update

update

Filteringdecision

configu re

genericdeviceinfo

Incomingtraffic

Outgoingtraffic

D1

browse,export

D1ßA

D1àT

Control Packetforwardingpath

3.1 3.23.2

3.5 3.5

3.3

3.4

topologychanges

no fica onsmanualoverride

Page 50: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Demo!

Page 51: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Status

• Running prototype• ‘Vertical slice’ of the concept• Visualises basic traffic• Blocks specified traffic

• Running prototype• ‘Vertical slice’ of the concept• Visualises basic traffic• Blocks specified traffic

• Open source: https://github.com/SIDN/SPIN

• Full (GL-Inet) images at https://valibox.sidnlabs.nl

Page 52: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Current high-level topics of interest

• Standardization• Pilot for large scale evaluation• Business models based on SPIN platform• SPIN as a platform for IoT research projects

Page 53: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Deployment

• We cannot do this alone!

• Get it into deployed devices?

• Maybe even standard home routers at ISPs?

• Free software, go get it ;)

Page 54: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Visualiser

Page 55: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Visualiser

Page 56: Security and Privacy in the Internet of Things · Scanner Traffic Filter Threat Detector Filtering DP Applica ons (Blocking No fier, Topology Browser, Sharing Applica on) PCAP Topology

Questions/ideas/suggestions?


 · Aliaje fier-carbon. Diagrama fier-cementitä, cristalizarea aliaje'or fier—carbon, diagrama Diagrama fier-cementitä, cristalizarea aliaje'or fier—carbon, diagrama constituentilor

Caramizi Ciment Plasa Fier

140506 FiER Buchheim

Topology - cisco.com · Topology •Topology,onpage1 Topology TheTopologywindowdisplayscolor-encodednodesandlinksthatcorrespondtovariousnetworkelements, includingswitches,links

FIER vitrine SS15 - Designer Presentation

FIER showroom AW1314

Fier d’être informaticien

FIER - Laend Phuengkit - May 2012

Ajaxifying Legacy Web Applica ons

Network Topology Network Topology

DHËNAT E SUBJEKTIT “SHOQËRI AKSIONARE ......Ndertesa HENRY, Kati i I-re. Fier Fier FIER Lagja “Kongresi Permetit”, Rruga "Jakov Xoxa", Pallati Nr. 28, Fier Vlore Vlore VLORE

FIER showroom AW1314 designers

APPLICA TION MEM BER SHIP

G FIER,coruptie-functionaripublici-ofiteri-farmec-consiliulconcurentei.ro/wp/wp-content/... · G FIER, Cristinel $andor Francisc. Obligä recurentii cärora li s-a respins calea de

Catalog Elemente Fier Forjat.eu SC Trutzi SRL 2011

Fier: Sink & Faucet

PARCUL NATURAL PORTILE DE FIER

Jack London - Calcaiul de Fier

FIER FORJAT wrought iron - FeeriaTitle FIER FORJAT wrought iron Author feeria.ro Subject wrought iron Keywords wrought iron Created Date 3/10/2011 11:15:55 AM

Assessment’of’Water’Energe/cs’and’ Applica/ons’to’Drug

Scanned Document - Baia de Fier

u constitution prohibits the applica-

Catalog TRUTZI Elemente Din Fier Forjat 2013

Aspecte ale eutrofizarii in zona umeda Portile de Fier

Fier: Bathroom Sink and Faucet

FIER showoom AW13/14

Carnavalul de Fier - Serge Brussolo

Diagrama Fier Carbon

Fier fm november 2011

Lina Fier Catalog 2014.Compressed

PERMIT APPLICA TI ON

Preparate Din Fier -Micu Ecaterina

Mortgage Assistance Applica n Checklist

200428 FiER Obrist - ETH Z

Abalasei Fier Porti Hale Industriale