Cyber security and the Internet of Things

9

Click here to load reader

Transcript of Cyber security and the Internet of Things

  1. 1. Cybersecurity and The Internet of Things By Eric Neuman
  2. 2. Life is becoming more connected Estimated that 50 billion devices will be online by 2020 Grau, A. (2015, February 27). Can you trust your fridge? Spectrum, IEEE, 50-56. Variety of devices including: Home security systems (door locks, alarms, cameras, etc.) Medical devices (heart monitors, pace makers, insulin pumps) Automobiles (locks, starters, braking systems, navigation)
  3. 3. Security flaws. It took a security expert less than 20 minutes to hack into 16 popular home devices. Tested devices included: Thermostats Cameras Home automation hubs Smoke / CO detectors Security cameras tend to be the least secure. https://gigaom.com/2015/02/11/when-it-comes-to-smart-home-security-cameras-are-the-worst/ "Suppose they overload 500 connected toasters in the DC Metro area at once, causing 500 small fires. That could be a great diversion for some other attack. Jeffrey Greene, Senior Policy Counsel for Symantec http://www.pcmag.com/article2/0,2817,2482620 ,00.asp
  4. 4. Lights.Camera.Action. Nanny Cam hacks One family found images of their childs crib online http://www.people.com/article/nanny-cam-hack-family-finds-images-childs-crib-online One hacker attempted to wake a child through a camera http://www.offthegridnews.com/privacy/terrifying-man-hacks-into-baby-monitor-talks-to-2- year-old-asleep-in-bed/ Another spoke to a nanny about a poopy diaper http://www.computerworld.com/article/2878741/hacker-hijacks-wireless-foscam-baby- monitor-talks-and-freaks-out-nanny.html
  5. 5. Biomedical Devices are also at risk! Defibrillators Pacemakers Cochlear implants Neuro-stimulators Medicine delivery devices i.e. Insulin Pumps http://www.slate.com/articles/technology/future_tense/2015/03/implantable_medical_devi ces_hacking_who_does_the_autopsy.html
  6. 6. Real danger. Homeland Broken Hearts (Season 2, Epsiode 10) http://www.imdb.com/title/tt2408792/plotsummary?ref_=tt_ov_pl While it hasnt been done, it could be! 300,000 Americans receive implanted, remotely accessible medical devices each year. http://www.slate.com/articles/technology/future_tense/2015/03/implantable_medical_devices_ha cking_who_does_the_autopsy.html Scared Former V.P. Dick Cheneys Dr. into disabling WiFi on Cheneys device. http://www.washingtonpost.com/blogs/the-switch/wp/2013/10/21/yes- terrorists-could-have-hacked-dick-cheneys-heart/ Grau, A. (2015, February 27). Can you trust your fridge? Spectrum, IEEE, 50-56. http://www.computerworld.com/article/2837413/security0/dhs-investigates-24- potentially-deadly-cyber-flaws-in-medical-devices.html
  7. 7. Fixing the issue NSTAC (National Security Telecommunications Advisory Committee) http://www.dhs.gov/sites/default/files/publications/NSTAC%20Report%20to%20the%20 President%20on%20the%20Internet%20of%20Things%20Nov%202014%20%28updat%20%20% 20.pdf Met on November 19, 2014 and made several recommendations about how to secure the Internet of Things. Suggestions included: Clearly defining the I.o.T. Establishing an interagency task force to handle the problems Offer more funding into research and development of I.o.T. security
  8. 8. Fixing the issue Use common sense! http://www.forbes.com/sites/symantec/2015/01/30/how-to-secure-your-personal-data-in-the- internet-of-things/ Change user names and passwords from factory default. Turn off WiFi and Bluetooth when devices arent being used Get smart devices repaired at legitimate shops Read terms and conditions that come with apps / devices
  9. 9. References "Homeland" - Broken Hearts - plot summary. (n.d.). Retrieved June 17, 2015, from http://www.imdb.com/title/tt2408792/plotsummary?ref_=tt_ov_pl Carlson, A. (2015, April 5). Minnesota Family Finds Images of Child's Crib Online After Nanny Cam Hack. Retrieved June 14, 2015, from http://www.people.com/article/nanny-cam-hack-family-finds-images-childs-crib-online Goodman, M. (2015, March 26). If You Die After Someone Hacks Your Glucose Monitor, Who Does the Autopsy? Retrieved June 14, 2015, from http://www.slate.com/articles/technology/future_tense/2015/03/implantable_medical_devices_hacking_who_does_the_autopsy.html Grau, A. (2015, February 27). Can you trust your fridge? Spectrum, IEEE, 50-56. Higganbotham, S. (2015, February 11). When it comes to smart home security, cameras are the worst. Retrieved June 17, 2015, from https://gigaom.com/2015/02/11/when-it-comes-to-smart-home-security-cameras-are-the-worst/ Jennings, D. (n.d.). Terrifying: Man Hacks Into Baby Monitor, Talks To 2-Year-Old Asleep In Bed. Retrieved June 13, 2015, from http://www.offthegridnews.com/privacy/terrifying-man-hacks-into-baby-monitor-talks-to-2-year-old-asleep-in-bed/ Kovacs, N. (2015, January 30). How To Secure Your Personal Data In The Internet Of Things. Retrieved June 14, 2015, from http://www.forbes.com/sites/symantec/2015/01/30/how-to-secure-your-personal-data-in-the-internet-of-things/ Peterson, A. (2013, October 21). Yes, terrorists could have hacked Dick Cheneys heart. Retrieved June 14, 2015, from http://www.washingtonpost.com/blogs/the-switch/wp/2013/10/21/yes-terrorists-could-have-hacked-dick-cheneys-heart/ Rubenking, N. (2015, April 23). Can We Secure the Internet of Things? Retrieved June 17, 2015, from http://www.pcmag.com/article2/0,2817,2482620,00.asp Storm, D. (2014, October 22). DHS investigates 24 potentially deadly cyber flaws in medical devices. Retrieved June 14, 2015, from http://www.computerworld.com/article/2837413/security0/dhs-investigates-24-potentially-deadly-cyber-flaws-in-medical-devices.html Storm, D. (2015, February 2). Hacker hijacks wireless Foscam baby monitor, talks and freaks out nanny. Retrieved June 13, 2015, from http://www.computerworld.com/article/2878741/hacker-hijacks-wireless-foscam-baby-monitor-talks-and-freaks-out-nanny.html THE PRESIDENTS NATIONAL SECURITY TELECOMMUNICATIONS ADVISORY COMMITTEE. (2014). NSTAC Report to the President on the Internet of Things. Retrieved June 14, 2015, from http://www.dhs.gov/sites/default/files/publications/NSTAC Report to the President on the Internet of Things Nov 2014 (updat .pdf