Upload File

threat modeling iot final - sinog · i8 insufficient security configurability i9 insecure...

  • Home
  • Documents
  • Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat
23
Threat modeling IoT Grega Prešeren

Upload: others

Post on 21-May-2020

4 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Threat modeling IoTGrega Prešeren

Page 2: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: krebsonsecurity.com

http://krebsonsecurity.com
Page 3: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat
Page 4: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: iot-analytics.com

http://iot-analytics.com
Page 5: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: cyberphysicalsystems.org

http://cyberphysicalsystems.org
Page 6: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

PhysicalCyber

Cloud

Embedded

Wireless

Mobile

CPS

Page 7: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

SECURITYBY DESIGN

START TO FINISH

END TO END

Page 8: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

DEFENSEIN DEPTH

START TO FINISH

END TO END

Page 9: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat
Page 10: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

3GPP

IEC

IETF

ETSI

Industrie 4.0

ITU-T

IoTSF

GSMA

NIST

OASIS

Page 11: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

OWASP IoT Top TenI1 Insecure Web Interface

I2 Insufficient Authentication/Authorization

I3 Insecure Network Services

I4 Lack of Transport Encryption

I5 Privacy Concerns

I6 Insecure Cloud Interface

I7 Insecure Mobile Interface

I8 Insufficient Security Configurability

I9 Insecure Software/Firmware

I10 Poor Physical Security

A1 Injection

A2 Broken Authentication and Session Management

A3 Cross-Site Scripting (XSS)

A4 Insecure Direct Object References

A5 Security Misconfiguration

A6 Sensitive Data Exposure

A7 Missing Function Level Access Control

A8 Cross-Site Request Forgery (CSRF)

A9 Using Components with Known Vulnerabilities

A10 Unvalidated Redirects and Forwards

M1 Improper Platform Usage

M2 Insecure Data Storage

M3 Insecure Communication

M4 Insecure Authentication

M5 Insufficient Cryptography

M6 Insecure Authorization

M7 Client Code Quality

M8 Code Tampering

M9 Reverse Engineering

M10 Extraneous Functionality

R1 Accountability and Data Ownership

R2 User Identity Federation

R3 Regulatory Compliance

R4 Business Continuity and Resiliency

R5 User Privacy and Secondary Usage of Data

R6 Service and Data Integration

R7 Multi Tenancy and Physical Security

R8 Incidence Analysis and Forensic Support

R9 Infrastructure Security

R10 Non Production Environment Exposure

Page 12: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat
Page 13: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat
Page 14: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: iiconsortium.org

http://iiconsortium.org
Page 15: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: wso2.com

http://wso2.com
Page 16: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: linkedin.com

http://linkedin.com
Page 17: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: linkedin.com

http://linkedin.com
Page 18: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: ieee.com

http://ieee.com
Page 19: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat
Page 20: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: microsoft.com

http://microsoft.com
Page 21: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Source: microsoft.com

http://microsoft.com
Page 22: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Sensor Actuator

Device Thing

ControllerGateway Middleware Application

EDGE TIER PLATFORM TIER ENTERPRISE TIER

ACC

ESS

NET

WO

RK

(Int

erne

t)

SERV

ICE

NET

WO

RK

(Int

erne

t)

PRO

XIM

ITY

NET

WO

RK

PRO

XIM

ITY

NET

WO

RK

ING

ESTI

ON

STO

RAG

E

AI /

ANAL

YTIC

S

MAN

AGEM

ENT

ENTERPRISE

VISU

ALIZ

ATIO

N

Page 23: Threat modeling IoT final - SINOG · I8 Insufficient Security Configurability I9 Insecure Software/Firmware I10 Poor Physical Security A1 Injection ... ENTERPRISE TION. Title: Threat

Cybercore Threat Analysis I - Fact Sheets Threat... · 2020. 12. 3. · THREAT ANALYSIS Similarly, control systems threat analysts must maintain a strategic perspective of the threat

Stereotype Threat: Undermining the Persistence of Racial ... 2009... · Stereotype Threat 1 Running head: STEREOTYPE THREAT . Stereotype Threat: Undermining the Persistence of Racial

Software Self-configurability in GPU-accelerated Robot …wp.doc.ic.ac.uk/lnardi/wp-content/uploads/sites/68/2014/04/2016_09... · Software Self-configurability in GPU-accelerated

Threat monitor Threat Intelligence Report Q1 2020

group-ib.com Threat Detection System Group−IB THREAT ... · group-ib.com How Threat Intelligence Works • Your security systems continuously detect threats. • Threat Intelligence

6 FROM THREAT TO THREAT FROM THREAT TO THREAT 174 In chapters 3 and 4we described how the U.S.government adjusted its existing agencies and capacities to address the emerging threat

Aerohive Simon - Slovenian Network Operators Group SINOG

ENISA Threat Landscape - Prisa Digitalboletines.prisadigital.com/ENISA Threat Landscape Published.pdf · 4 ENISA Threat Landscape Responding to the Evolving Threat Environment 2 Introduction

Enabling Efficient Cyber Threat Hunting with Cyber Threat

Model-based Programmable Networks SINOG 2.0. Applications and Networks Routing system players: the Application and the Network. –Different interdependent

Deploying BGP Large Communitieslargebgpcommunities.net/presentations/SINOG2017_Snijders_Large... · 5/22/17 SINOG 4.0, Ljubljana ... –Documentation for each implementation ... MikroTik

Tactical Threat Modeling - SAFECode · Tactical Threat Modeling

Two years of good MANRS - SINOG · Good MANRS • Filtering–Prevent propagation of incorrect routing information • Own announcements and the customer cone • Anti-spoofing –Prevent

Ljubiša Crnadak - SINOG - Slovenian Network Operators ... · PDF fileLjubiša Crnadak Solution Manager Cloud Core Solution Sales, CEE&Nordic Region

Cardinal's Model 825 Digital Weight Indicator€¦ · [email protected] “Building a better weigh.” TIME: 10:57am DATE: Nov. 17, 2008 ID: HWF1 Complete ticket configurability

CORONAVIRUS: OPINION AND REACTION...Germany Japan Russia Very high threat High threat Moderate threat Low threat Very low threat Don't know (Your country) What level of threat do you

DIM-VEX: Exploiting Design Time Configurability and Runtime ...ce-publications.et.tudelft.nl/publications/1705_dimvex_exploiting_design_time... · is: as it is highly regular, it

Axially and radially expandable modular helical soft ... · in more complex systems due to re-configurability, scalability and ease of assembly of basic components. B. Conceptual

INSIDER THREAT - Optiv · Insider Threat Defined While insider threat has been defined in many different ways, Optiv defines insider threat as: “An insider threat is an employee,

The Sharing Architecture - Princeton Universityyanqiz/Sharing.pdf · The Sharing Architecture: Sub-Core Configurability for IaaS Clouds Yanqi Zhou Princeton University F210 E2 Engineering

SINOG Behaviourand anomaly detectionRouters Switches 10.1.8.3 Internet 172.168.134.2 Network as Data Source Collecting data: •Collect data across almost every device in your network

THREAT COMPASS - Blueliv...Threat Compass Threat Context provides security teams with continuously updated and intuitive information around threat actors, campaigns, IOCs, malware,

Counter Threat Unit™ Threat Intelligence

Identity of the Threat and Methodology; Insider Threat

proposed-international-airport-poses-threat- threat to the

RIPE Atlas for Network Operators - SINOG … · Vesna Manojlovic - SINOG 2 - 10 June 2015 Network monitoring •Operators use tools for monitoring network health -For example, Nagios

Large Scale Firewall Management - SINOG

Measuring and visualizing cyber threat intelligence quality · Keywords Cyber threat intelligence · Threat intelligence sharing · Data quality · Threat intelligence formats ·

VOLTTRON™ Threat Profilesoftware system and recommends mitigation controls. Services include threat models, threat findings, and threat profiles. Secure Software Development –

THREAT ACTOR BASICS: UNDERSTANDING THE 5 MAIN THREAT …

Saarinen, Tapio; Hannula, Jari-Matti; Lehtovuori, Anu ... · The approach implements frequency re-configurability by feeding a multiport antenna with differently amplified and delayed

Traffic analysis with NetFlow - SINOG

Securing Network Automation - SINOG · 12 © ipSpace.net 2017 Securing Network Automation –SINOG 4.0 • Puppet master generates per-node catalog • Puppet agents (running on individual

CYBER THREAT INTELLIGENCE ESTIMATE 2017€¦ · 2017 THREAT LANDSCAPE REPORT Cyber Threat Intelligence 7 8. THREAT ACTORS When security professionals talk about threat actors, they

THREAT COMPASS - Blueliv...Threat Compass. Targeted threat intelligence saves time and maximizes security resource while accelerating threat detection, incident response performance