Challenges Towards Secure Internet of Things

1 downloads 0 Views 53KB Size Report
OWASP Internet of Things Top 10. -‐ I1 Insecure Web Interface. -‐ I2 Insufficient Authenecaeon/. Authorizaeon. -‐ I3 Insecure Network Services. -‐ I4 Lack of ...
Challenges  Towards  Secure     Internet  of  Things           Carlos  Becker  Westphall     Networks  and  Management  Laboratory  

Federal  University  of  Santa  Catarina   NOVEMBER  17TH,  LISBON,  PORTUGAL  

IARIA  SECURWARE  2014  -­‐  PANEL  

1  

Some  quesAons   -­‐  All   of   that   data   being   harvested   in   an   automated   fashion   but,   who   has   access   to   the   data?     -­‐  What   type   of   informaAon   is   actually   being   collected?     -­‐  How  do  you  go  about  managing  the  username/ passwords   for   your   ever   increasing   number   of   connected  devices  and  appliances?   -­‐  What  about  the  privacy  of  your  informaAon?      

NOVEMBER  17TH,  LISBON,  PORTUGAL  

IARIA  SECURWARE  2014  -­‐  PANEL  

2  

OWASP  Internet  of  Things  Top  10   -­‐  I1  Insecure  Web  Interface   -­‐  I 2   I n s u ffi c i e n t   A u t h e n A c a A o n / AuthorizaAon   -­‐  I3  Insecure  Network  Services   -­‐  I4  Lack  of  Transport  EncrypAon   -­‐  I5  Privacy  Concerns      

hYps://www.owasp.org/index.php/ OWASP_Internet_of_Things_Top_Ten_Project#tab=OWASP_Internet_of_Things_Top_10_for_2014   NOVEMBER  17TH,  LISBON,  PORTUGAL  

IARIA  SECURWARE  2014  -­‐  PANEL  

3  

OWASP  Internet  of  Things  Top  10   -­‐  I6  Insecure  Cloud  Interface   -­‐  I7  Insecure  Mobile  Interface   -­‐  I8  Insufficient  Security  Configurability   -­‐  I9  Insecure  Soeware/Firmware   -­‐  I10  Poor  Physical  Security   hYps://www.owasp.org/index.php/ OWASP_Internet_of_Things_Top_Ten_Project#tab=OWASP_Internet_of_Things_Top_10_for_2014   NOVEMBER  17TH,  LISBON,  PORTUGAL  

IARIA  SECURWARE  2014  -­‐  PANEL  

4