So welcome to section 4.3. And in
this section, I'm going to give you a quick and dirty overview of
iot security.
So iot, as I've explained in the previous slides.
Are obviously quickly, improving our homes, workplaces
and urban infrastructure, but
it's also one of the easiest segments of
the smart cities to hack and potentially win
with lots of dangerous consequences. So,
let's go over some of those ways that hackers are
taking advantage of these systems
and causing all sorts of havoc.
This is a very simple illustration about how
hacker cybercriminals basically are
able to access your iot device
and create all
sorts of crazy results. So
the cybercriminal look, for those
kinds of vulnerabilities and find
those weak devices. And sometimes these
are their hubs in the routers and Wi-Fi
access points.
Once they're in, they look for the iot device,
once they're inside the device. Then they can do
swords all sorts of evil things. Like, for example,
if cybercriminal got
into your Alexa, that's has
lots of different sensors like microphones and
so forth or if it got in and a
home inside your home security system and the
hacker could potentially get access to your
Camera and start recording things.
So once
they have that then they send
the private information to a malicious server and
then they can create all
sorts of Havoc for your home or business.
So, the typical attack type is the DDOS, that
is a kind of denial of service attack. This will be familiar to
a lot of you that do come from the cybersecurity security
background. But for those that you don't know, it's,
it's basically a way of
the hackers breaking into your device
and transforming them into a zombie
machine. Basically, to flood your house, your
home, your business with, with requests for
information, and then blocking,
From receiving legitimate server requests. So
in this diagram what you're seeing here is the mr. Criminal on the
top and he is just basically weaponized all
of your devices to attack
us. Some server that floods
the system and prevents actual request
from happening.
Attacks. Come in all shapes and
sizes. And so in this section, we're
going to look at the various threats and vulnerabilities what
they are and how did they
actually happen?
So, there are various types of attacks and
iot devices. Again, many,
many shapes many sizes. There's
the physical, which is the most obvious one,
right? What can you do with a hammer? And
you can physically do harm from the out iot device.
So, it's top is starts working at some to collecting data. You
can attack the network where
you can manipulate the iot network system to cause disruption.
Nor damage that was the example. I
gave previously the software itself. So poor security
makes iot devices vulnerable to
attacks and system. So you got to make sure that all of your devices are
hardened one way or the other to prevent people
from manipulating the software. Encryption,
of course, is where
it's how they get into these attacks happen by side by
side Channel, Crypt analysts in man-in-the-middle attacks.
These are more technical terms, but
You can bypass a lot of the security systems with basic
that tax on the or decrypting, the,
the system that you have.
So, let's have a look together on the
various threats and vulnerabilities of iot devices. And
in this diagram, we're just looking at the
many, many different attack types. So one
way is the lack of hardening of
a it's a iot device. So if you don't have
good protections, VPN tunnels and
so forth, the thief can very simple, it's
very simply get inside. The the device botnets
are another way which is kind of a mall where
That is kind of designed to steal uncompromised
data from host organizations. There's
ransomware, of course, which is the you
know, the flavor of the week kind of thing where
it's a big business model right now where
you could get inside a device
and therefore into inside the
network and lock the databases or the
infrastructure until a ransom is paid.
There's another way of you know, when you don't have when you have lack
of visit eight visibility and device management. You
can lose control over your super super sensitive
data about in healthcare Finance infrastructure.
So you need to
obviously Harden, not
Harden, but encrypt these systems to prevent that
from from allowing
the hackers to actually manage your
device.
Another way is insecure data and transfer. So
iot devices rely on data, transfer storage
in Cross communications between other devices and
networks. So encryption is the key against the
data breaches. And that's like, all
the previous examples and AI
based attacks is much more sophisticated, but nevertheless, it's
on the rise, and these are custom-made algorithms
machine learning programs that can
perform tasks easier and faster than humans and IRT.
Infrastructure so that you know rapid firing
as vulnerabilities and
means to attack your systems just based on
algorithms and machine learning kinds
of phone system. So those are on the those are becoming more and
more dangerous.
So let's look at the
securing the iot infrastructure. And
what we're talking about here is that there are many IT
solutions and security principles to stop
malicious attacks, but maybe this section
can help you figure
out what you can do to help.
Let's conclude this section covering the kind of the
different iot solutions in the security principles. We
could adhere to to make sure that our
sister party platforms and networks are
as safe as possible. And
these this in this diagram, what you're looking at
is obviously the user you and me where
owners of many, many types of devices may be smart, Home,
Smart office, smart Factory, and there is
a kind of a layer of secure communication.
Nations, which is the the Gateway itself to
distribute the collected, talk
and distribute the data and the connections that are actually connecting
to those devices that are talking to the
cloud in the city. And so in this and layer, we're talking
about the Secure Storage so it could be local could
be microprocessors, but nevertheless the
days can be stored somewhere. And then from that server,
you can run a number of applications like ERM ER
P CS M and P.
M. So what are the kind of principles you
need to adhere to? These are really kind of
pointers and tips and suggestions on how to deal
with each of these layers. So on the security device layer that
you make, you have to make sure that your device has a some
degree of intelligence that
if it is processing, maybe it's
best to keep the processing on
a micro-level. So, inside the device itself, which
is called.
Edge processing on the security Communications
layer that you have a device that
itself that initiates the connections, and
you have a kind of control over the
messaging. So either develop the device or
you can throttle the types
of communications and the other layer, the
Secure Storage layer, you got to be very aware
of the different types. Of authentications is a two Factor,
1 Factor. How what?
What type of credentials do you need? And what kinds
of encryptions will you do baked into
the protections? And then this
kind of creates a kind of secure lifestyle management lifecycle
management where the remote control
and the updates can be done from
a distance. So you
don't need to be on site. But you have constant access to
update firmwares and update software is
to keep your device safe and secure.
So that's iot that's the kind of glue
that holds our city together or certainly our feature City.
One of the results of the
itu is of course data collection, and I am going to be
talking about these super important role of
open data for smart cities in the next section.