European Union Agency for Network and Information Security

Securing the Internet of Things (IoT)Dr. Evangelos OUZOUNIS | Head of Unit Secure Infrastructures and ServicesNaftemporiki IoT Conference | Athens | 25/11/2015

2

Positioning ENISA activities

Securing the Internet of Things (IoT) | Dr. Evangelos OUZOUNIS

3

Current challenges of IoT

• Capacity-limited devices

• Data exchange with other devices and remote services

• IoT can be cyber-physical systems (sensors/actuators)

Objectives

• Dynamic adaption of services

• Reduction of operational expenditure

• Improvement of the service and the quality of life

Securing the Internet of Things (IoT) | Dr. Evangelos OUZOUNIS

IoT at the heart of Smart Infrastructures

CyberSystem

PhysicalSystem

4

An emerging topic

• New business models

• Increase of deployments in critical sectors

• Lack of harmonisation, in particular for cyber security

Numerous threats

• Insecurity of components, data exchanges, infrastructure

• Lack of security awareness (manufacturers, users)

• “Functionalities over security”

Securing the Internet of Things (IoT) | Dr. Evangelos OUZOUNIS

IoT in Europe

Smart Homes

IntelligentTransportation Systems

Smart CitiesSCADA

and Industry 4.0

eHealth

Important to secure IoT and the citizens against cyber threats

5

ENISA has expertise to secure IoT

• Evaluation of threats• Promotion of security good practices• Stakeholders engagement• Community expert groups• Liaison with policy makers

Domains of activity:

• Smart Homes• Intelligent Public Transport• eHealth• Smart Cars

Securing the Internet of Things (IoT) | Dr. Evangelos OUZOUNIS

ENISA work to secure IoT

6

Securing the lifecycle of IoT

Securing the Internet of Things (IoT) | Dr. Evangelos OUZOUNIS

Employ security by design using good practices Test the security of productsProvide training and raise awareness

Consider usage in unsecure environmentsProtect devices and data exchangeProtect user’s data

Understand new vulnerabilitiesPerform security updatesProtect data exchange

All stakeholders must cooperate to enhance IoT security

7

IoTs will create new business models and services

Security of IoTs is necessary for the quick adoption

• Threats are real and evolve rapidly

• Impact on the society and potentially health and safety

• Lack of harmonisation in security measures

ENISA work to enhance IoT security

• Reports (e.g. Securing Smart Homes – early December)

• Expert groups

• Awareness rising

Securing the Internet of Things (IoT) | Dr. Evangelos OUZOUNIS

Conclusion

PO Box 1309, 710 01 Heraklion, Greece

Tel: +30 28 14 40 9710

info@enisa.europa.eu

www.enisa.europa.eu

Thank you