WEBVTT - This file was automatically generated by VIMEO 1 00:00:06.700 --> 00:00:09.200 So welcome to section 4.3. And in 2 00:00:09.200 --> 00:00:12.400 this section, I'm going to give you a quick and dirty overview of 3 00:00:12.400 --> 00:00:13.700 iot security. 4 00:00:15.700 --> 00:00:18.800 So iot, as I've explained in the previous slides. 5 00:00:18.100 --> 00:00:22.300 Are obviously quickly, improving our homes, workplaces 6 00:00:21.800 --> 00:00:24.800 and urban infrastructure, but 7 00:00:24.800 --> 00:00:27.300 it's also one of the easiest segments of 8 00:00:27.300 --> 00:00:30.400 the smart cities to hack and potentially win 9 00:00:30.400 --> 00:00:33.200 with lots of dangerous consequences. So, 10 00:00:33.200 --> 00:00:36.900 let's go over some of those ways that hackers are 11 00:00:36.900 --> 00:00:40.000 taking advantage of these systems 12 00:00:39.300 --> 00:00:42.100 and causing all sorts of havoc. 13 00:00:44.300 --> 00:00:48.100 This is a very simple illustration about how 14 00:00:47.100 --> 00:00:50.400 hacker cybercriminals basically are 15 00:00:50.400 --> 00:00:53.700 able to access your iot device 16 00:00:53.800 --> 00:00:56.100 and create all 17 00:00:56.100 --> 00:01:00.200 sorts of crazy results. So 18 00:00:59.300 --> 00:01:02.300 the cybercriminal look, for those 19 00:01:02.300 --> 00:01:05.800 kinds of vulnerabilities and find 20 00:01:05.800 --> 00:01:08.200 those weak devices. And sometimes these 21 00:01:08.200 --> 00:01:11.400 are their hubs in the routers and Wi-Fi 22 00:01:11.400 --> 00:01:12.300 access points. 23 00:01:12.900 --> 00:01:15.600 Once they're in, they look for the iot device, 24 00:01:15.700 --> 00:01:18.800 once they're inside the device. Then they can do 25 00:01:18.800 --> 00:01:21.800 swords all sorts of evil things. Like, for example, 26 00:01:21.800 --> 00:01:24.300 if cybercriminal got 27 00:01:24.300 --> 00:01:28.300 into your Alexa, that's has 28 00:01:27.300 --> 00:01:30.500 lots of different sensors like microphones and 29 00:01:30.500 --> 00:01:33.000 so forth or if it got in and a 30 00:01:33.100 --> 00:01:36.400 home inside your home security system and the 31 00:01:36.400 --> 00:01:38.500 hacker could potentially get access to your 32 00:01:39.800 --> 00:01:43.200 Camera and start recording things. 33 00:01:42.600 --> 00:01:45.600 So once 34 00:01:45.600 --> 00:01:48.300 they have that then they send 35 00:01:48.300 --> 00:01:51.500 the private information to a malicious server and 36 00:01:51.500 --> 00:01:54.200 then they can create all 37 00:01:54.200 --> 00:01:57.300 sorts of Havoc for your home or business. 38 00:01:59.600 --> 00:02:03.700 So, the typical attack type is the DDOS, that 39 00:02:03.700 --> 00:02:06.600 is a kind of denial of service attack. This will be familiar to 40 00:02:06.600 --> 00:02:09.700 a lot of you that do come from the cybersecurity security 41 00:02:09.700 --> 00:02:12.300 background. But for those that you don't know, it's, 42 00:02:12.600 --> 00:02:15.400 it's basically a way of 43 00:02:15.500 --> 00:02:19.500 the hackers breaking into your device 44 00:02:18.500 --> 00:02:21.400 and transforming them into a zombie 45 00:02:21.400 --> 00:02:24.400 machine. Basically, to flood your house, your 46 00:02:24.400 --> 00:02:27.700 home, your business with, with requests for 47 00:02:27.700 --> 00:02:29.300 information, and then blocking, 48 00:02:29.500 --> 00:02:32.200 From receiving legitimate server requests. So 49 00:02:32.200 --> 00:02:35.100 in this diagram what you're seeing here is the mr. Criminal on the 50 00:02:35.100 --> 00:02:38.700 top and he is just basically weaponized all 51 00:02:38.700 --> 00:02:41.500 of your devices to attack 52 00:02:41.500 --> 00:02:44.600 us. Some server that floods 53 00:02:44.600 --> 00:02:47.900 the system and prevents actual request 54 00:02:47.900 --> 00:02:48.600 from happening. 55 00:02:50.900 --> 00:02:53.100 Attacks. Come in all shapes and 56 00:02:53.100 --> 00:02:56.600 sizes. And so in this section, we're 57 00:02:56.600 --> 00:03:00.100 going to look at the various threats and vulnerabilities what 58 00:02:59.100 --> 00:03:02.100 they are and how did they 59 00:03:02.100 --> 00:03:02.900 actually happen? 60 00:03:05.200 --> 00:03:08.500 So, there are various types of attacks and 61 00:03:08.500 --> 00:03:11.800 iot devices. Again, many, 62 00:03:11.800 --> 00:03:14.200 many shapes many sizes. There's 63 00:03:14.200 --> 00:03:17.700 the physical, which is the most obvious one, 64 00:03:17.700 --> 00:03:20.800 right? What can you do with a hammer? And 65 00:03:20.800 --> 00:03:23.600 you can physically do harm from the out iot device. 66 00:03:23.600 --> 00:03:27.600 So, it's top is starts working at some to collecting data. You 67 00:03:27.600 --> 00:03:30.700 can attack the network where 68 00:03:30.700 --> 00:03:33.300 you can manipulate the iot network system to cause disruption. 69 00:03:33.400 --> 00:03:36.000 Nor damage that was the example. I 70 00:03:36.200 --> 00:03:40.000 gave previously the software itself. So poor security 71 00:03:39.300 --> 00:03:42.200 makes iot devices vulnerable to 72 00:03:42.200 --> 00:03:45.100 attacks and system. So you got to make sure that all of your devices are 73 00:03:45.100 --> 00:03:48.700 hardened one way or the other to prevent people 74 00:03:48.700 --> 00:03:51.900 from manipulating the software. Encryption, 75 00:03:51.900 --> 00:03:54.600 of course, is where 76 00:03:54.600 --> 00:03:57.100 it's how they get into these attacks happen by side by 77 00:03:57.100 --> 00:04:00.800 side Channel, Crypt analysts in man-in-the-middle attacks. 78 00:04:00.800 --> 00:04:02.600 These are more technical terms, but 79 00:04:03.500 --> 00:04:07.200 You can bypass a lot of the security systems with basic 80 00:04:06.200 --> 00:04:10.000 that tax on the or decrypting, the, 81 00:04:09.100 --> 00:04:11.100 the system that you have. 82 00:04:12.900 --> 00:04:15.400 So, let's have a look together on the 83 00:04:15.400 --> 00:04:19.000 various threats and vulnerabilities of iot devices. And 84 00:04:18.400 --> 00:04:21.300 in this diagram, we're just looking at the 85 00:04:21.300 --> 00:04:24.300 many, many different attack types. So one 86 00:04:24.300 --> 00:04:27.200 way is the lack of hardening of 87 00:04:27.200 --> 00:04:30.200 a it's a iot device. So if you don't have 88 00:04:30.200 --> 00:04:33.000 good protections, VPN tunnels and 89 00:04:33.200 --> 00:04:36.500 so forth, the thief can very simple, it's 90 00:04:36.500 --> 00:04:40.000 very simply get inside. The the device botnets 91 00:04:39.400 --> 00:04:42.600 are another way which is kind of a mall where 92 00:04:43.500 --> 00:04:46.900 That is kind of designed to steal uncompromised 93 00:04:46.300 --> 00:04:49.500 data from host organizations. There's 94 00:04:49.500 --> 00:04:52.100 ransomware, of course, which is the you 95 00:04:52.100 --> 00:04:55.400 know, the flavor of the week kind of thing where 96 00:04:55.700 --> 00:04:58.900 it's a big business model right now where 97 00:04:58.900 --> 00:05:01.800 you could get inside a device 98 00:05:01.800 --> 00:05:04.100 and therefore into inside the 99 00:05:04.100 --> 00:05:08.400 network and lock the databases or the 100 00:05:08.400 --> 00:05:10.900 infrastructure until a ransom is paid. 101 00:05:12.100 --> 00:05:15.200 There's another way of you know, when you don't have when you have lack 102 00:05:15.200 --> 00:05:18.100 of visit eight visibility and device management. You 103 00:05:18.100 --> 00:05:21.900 can lose control over your super super sensitive 104 00:05:21.400 --> 00:05:24.800 data about in healthcare Finance infrastructure. 105 00:05:24.600 --> 00:05:27.500 So you need to 106 00:05:27.600 --> 00:05:30.600 obviously Harden, not 107 00:05:30.600 --> 00:05:34.200 Harden, but encrypt these systems to prevent that 108 00:05:33.200 --> 00:05:36.500 from from allowing 109 00:05:36.500 --> 00:05:39.500 the hackers to actually manage your 110 00:05:39.500 --> 00:05:40.000 device. 111 00:05:40.900 --> 00:05:43.800 Another way is insecure data and transfer. So 112 00:05:43.800 --> 00:05:47.000 iot devices rely on data, transfer storage 113 00:05:46.200 --> 00:05:49.200 in Cross communications between other devices and 114 00:05:49.200 --> 00:05:52.400 networks. So encryption is the key against the 115 00:05:52.400 --> 00:05:55.700 data breaches. And that's like, all 116 00:05:55.700 --> 00:05:58.500 the previous examples and AI 117 00:05:58.500 --> 00:06:01.300 based attacks is much more sophisticated, but nevertheless, it's 118 00:06:01.300 --> 00:06:04.700 on the rise, and these are custom-made algorithms 119 00:06:04.700 --> 00:06:07.200 machine learning programs that can 120 00:06:07.200 --> 00:06:10.100 perform tasks easier and faster than humans and IRT. 121 00:06:10.500 --> 00:06:13.800 Infrastructure so that you know rapid firing 122 00:06:13.800 --> 00:06:16.500 as vulnerabilities and 123 00:06:16.600 --> 00:06:19.400 means to attack your systems just based on 124 00:06:19.400 --> 00:06:22.400 algorithms and machine learning kinds 125 00:06:22.400 --> 00:06:25.100 of phone system. So those are on the those are becoming more and 126 00:06:25.100 --> 00:06:26.300 more dangerous. 127 00:06:29.800 --> 00:06:32.500 So let's look at the 128 00:06:32.500 --> 00:06:35.700 securing the iot infrastructure. And 129 00:06:35.700 --> 00:06:38.600 what we're talking about here is that there are many IT 130 00:06:38.600 --> 00:06:41.300 solutions and security principles to stop 131 00:06:41.300 --> 00:06:45.200 malicious attacks, but maybe this section 132 00:06:44.200 --> 00:06:48.100 can help you figure 133 00:06:47.100 --> 00:06:49.200 out what you can do to help. 134 00:06:51.100 --> 00:06:54.700 Let's conclude this section covering the kind of the 135 00:06:54.700 --> 00:06:58.000 different iot solutions in the security principles. We 136 00:06:57.800 --> 00:07:00.300 could adhere to to make sure that our 137 00:07:00.300 --> 00:07:03.700 sister party platforms and networks are 138 00:07:03.200 --> 00:07:06.700 as safe as possible. And 139 00:07:06.700 --> 00:07:09.300 these this in this diagram, what you're looking at 140 00:07:09.300 --> 00:07:12.400 is obviously the user you and me where 141 00:07:12.400 --> 00:07:15.300 owners of many, many types of devices may be smart, Home, 142 00:07:15.300 --> 00:07:18.500 Smart office, smart Factory, and there is 143 00:07:18.500 --> 00:07:20.800 a kind of a layer of secure communication. 144 00:07:20.900 --> 00:07:23.600 Nations, which is the the Gateway itself to 145 00:07:23.600 --> 00:07:26.500 distribute the collected, talk 146 00:07:26.500 --> 00:07:29.500 and distribute the data and the connections that are actually connecting 147 00:07:29.500 --> 00:07:32.300 to those devices that are talking to the 148 00:07:32.300 --> 00:07:35.300 cloud in the city. And so in this and layer, we're talking 149 00:07:35.300 --> 00:07:38.600 about the Secure Storage so it could be local could 150 00:07:38.600 --> 00:07:41.200 be microprocessors, but nevertheless the 151 00:07:41.200 --> 00:07:45.700 days can be stored somewhere. And then from that server, 152 00:07:45.800 --> 00:07:48.700 you can run a number of applications like ERM ER 153 00:07:48.700 --> 00:07:50.700 P CS M and P. 154 00:07:50.800 --> 00:07:53.100 M. So what are the kind of principles you 155 00:07:53.100 --> 00:07:56.400 need to adhere to? These are really kind of 156 00:07:56.500 --> 00:08:00.500 pointers and tips and suggestions on how to deal 157 00:08:00.500 --> 00:08:04.500 with each of these layers. So on the security device layer that 158 00:08:04.500 --> 00:08:07.700 you make, you have to make sure that your device has a some 159 00:08:07.700 --> 00:08:11.500 degree of intelligence that 160 00:08:11.900 --> 00:08:14.200 if it is processing, maybe it's 161 00:08:14.200 --> 00:08:17.600 best to keep the processing on 162 00:08:17.600 --> 00:08:20.400 a micro-level. So, inside the device itself, which 163 00:08:20.400 --> 00:08:20.700 is called. 164 00:08:21.300 --> 00:08:24.700 Edge processing on the security Communications 165 00:08:24.700 --> 00:08:27.400 layer that you have a device that 166 00:08:27.300 --> 00:08:31.100 itself that initiates the connections, and 167 00:08:30.100 --> 00:08:33.400 you have a kind of control over the 168 00:08:33.400 --> 00:08:36.500 messaging. So either develop the device or 169 00:08:36.500 --> 00:08:39.300 you can throttle the types 170 00:08:39.300 --> 00:08:42.500 of communications and the other layer, the 171 00:08:42.500 --> 00:08:45.500 Secure Storage layer, you got to be very aware 172 00:08:45.500 --> 00:08:48.500 of the different types. Of authentications is a two Factor, 173 00:08:48.500 --> 00:08:50.700 1 Factor. How what? 174 00:08:50.800 --> 00:08:53.300 What type of credentials do you need? And what kinds 175 00:08:53.300 --> 00:08:56.600 of encryptions will you do baked into 176 00:08:56.600 --> 00:08:59.300 the protections? And then this 177 00:08:59.300 --> 00:09:03.200 kind of creates a kind of secure lifestyle management lifecycle 178 00:09:02.200 --> 00:09:05.800 management where the remote control 179 00:09:05.800 --> 00:09:08.700 and the updates can be done from 180 00:09:08.700 --> 00:09:11.300 a distance. So you 181 00:09:11.300 --> 00:09:14.700 don't need to be on site. But you have constant access to 182 00:09:14.200 --> 00:09:17.400 update firmwares and update software is 183 00:09:17.400 --> 00:09:20.200 to keep your device safe and secure. 184 00:09:23.200 --> 00:09:26.200 So that's iot that's the kind of glue 185 00:09:26.200 --> 00:09:29.700 that holds our city together or certainly our feature City. 186 00:09:29.200 --> 00:09:32.100 One of the results of the 187 00:09:32.100 --> 00:09:35.100 itu is of course data collection, and I am going to be 188 00:09:35.100 --> 00:09:38.100 talking about these super important role of 189 00:09:38.100 --> 00:09:40.800 open data for smart cities in the next section.