Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and...

16
Advanced Networked Agents for Security and Trust Assessment in CPS/IoT Architectures ANASTACIA has received funding from the European Union’s Horizon 2020 Research and Innovation Programme under Grant Agreement N° 731558 and from the Swiss State Secretariat for Education, Research and Innovation. Managing Network-Level IoT Security and Privacy Risks with ANASTACIA Adrian Quesada Rodriguez MA. MSc. Lic. CIPP/E Project Manager and DPO Mandat International IoT Week 2019 Aarhus, Denmark

Transcript of Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and...

Page 1: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Advanced Networked Agents for Security and Trust Assessment in CPS/IoT Architectures

ANASTACIA has received funding from the European Union’s Horizon 2020

Research and Innovation Programmeunder Grant Agreement N° 731558

and from the Swiss State Secretariat for Education, Research and Innovation.

Managing Network-Level IoT Security and Privacy Risks with ANASTACIA

Adrian Quesada Rodriguez MA. MSc. Lic. CIPP/E

Project Manager and DPOMandat International

IoT Week 2019Aarhus, Denmark

Page 2: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

GDPR principles (art. 5)• Lawfulness, fairness and transparency• Purpose limitation• Data minimization• Accuracy• Storage limitations• Integrity and confidentiality

Approach: Personal data protection and security by design and default (art. 25)

Requirements:• Organizational: Consent and proof of consent,

Underage consent, DPIA…• Technical: Encryption, anonymization, access

management…• Administrative: Data breach reports to DPA

VS

Internet of Things (IoT) connected devices installed base worldwide from 2015 to 2025 (in billions)

Source: https://www.statista.com/statistics/471264/iot-number-of-connected-devices-worldwide/

The IoT Privacy/Security challenge

https://www.statista.com/statistics/471264/iot-number-of-connected-devices-worldwide/
Page 3: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Source: https://www.statista.com/statistics/471264/iot-number-of-connected-devices-worldwide/ and “Internet of Things: Survey on Security and Privacy” by Diego M. Mendez, Ioannis Papapanagiotou, Baijian Yang (Purdue University) https://arxiv.org/abs/1707.01879

Who can solve the compliance puzzle?Internet of Things (IoT) connected devices installed base worldwide from 2015 to 2025 (in billions)

https://www.statista.com/statistics/471264/iot-number-of-connected-devices-worldwide/
https://arxiv.org/abs/1707.01879
Page 4: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

How to enable Privacy/Security management for all?

ANASTACIA G.A. 731558 - www.anastacia-h2020.eu 4IoT pervasivity: VALUE ADDED vs (ACCEPTED?) RISKS

Page 5: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

ANASTACIA’s mission

• To develop a trustworthy-by-design autonomic security framework which will address all the phases of the ICT Systems Development Lifecycle (SDL) and will be able to take autonomous decisions through the use of new networking technologies such as Software Defined Networking (SDN) and Network Function Virtualisation (NFV) and intelligent and dynamic security enforcement and monitoring methodologies and tools

• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

ANASTACIA G.A. 731558 - www.anastacia-h2020.eu 5

Page 6: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Holistic Dynamic Security and Privacy Seal (DSPS)

Security development paradigm

ANASTACIA framework

ANASTACIA G.A. 731558 - www.anastacia-h2020.eu 6

Self-protection capabilities

Self-healing capabilities

Self-repair capabilities

FRAMEWORK

DEVICE

SECURITYBEST

PRACTICES

SECURITY& PRIVACY

STANDARDS

VALUE CHAIN

Distributed trust and security components and enablers

Page 7: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

ANASTACIA’s Aproach

• Focus:– network-level threats and network

technologies (SDN/NFV)

• Security:– Trusted Security Orchestration in

SDN/NFV-enabled IOT

– Security monitoring: DPI/DNI

– Automated Cognitive Reaction and Mitigation Components

• Security Risk Assessment:– severity, asset importance, cost of mitigation

• Consequence prediction and prevention– IDS/DPS + behavioral engine

Page 8: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Security + Privacy: How to connect them?

1. DSPS (GUI): Meaningful and simple information for CISO/DPO

2. Mapping of monitored security threats to network-level privacy risks:

• Risk 1, 2, 4: access, modification and deletion of personal data (malware, etc.)

• Risk 3: lacking anonymization/encryption of information

• Risk 5: intra-network monitoring (man in the middle)

• Risk 6: external network monitoring (insecure communication channels)

• Risk 7: data availability and downtime (DDoS)

3. ISO-based privacy risk assessment process

4. CISO/DPO signed feedback + non-repudiable audit trail

Page 9: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Dynamic Security and Privacy Seal

Page 10: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Dynamic Security and Privacy Seal

Page 11: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Dynamic Security and Privacy Seal

Page 12: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Dynamic Security and Privacy Seal

Page 13: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

EU Security/Privacy-compliant IoT Business Ecosystem

ANASTACIA G.A. 731558 - www.anastacia-h2020.eu 13

Page 14: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Take-aways

• Human-focused Privacy and Security by design is necessary to enable trust

• ANASTACIA can help track the implementation of these principles in IoT/CPS architectures

• The DSPS aims to bridge privacy and security perspectives in a trustworthy manner

ANASTACIA G.A. 731558 - www.anastacia-h2020.eu 14

Page 15: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Contacts

ANASTACIA G.A. 731558 - www.anastacia-h2020.eu 15

• Project CoordinatorStefano BIANCHI (Softeco Sismat)[email protected]

• Scientific and Technical Project ManagerAntonio SKARMETA (Universidad de Murcia)[email protected]

• DSPS CoordinatorAdrian QUESADA RODRIGUEZ (Mandat International)[email protected]

mailto:[email protected]
mailto:[email protected]
mailto:[email protected]
Page 16: Managing Network-Level IoT Security and Privacy …...• Holistic solution enabling trust and security by-design for Cyber Physical Systems (CPS) based on IoT and cloud architectures

Advanced Networked Agents for Security and Trust Assessment in CPS/IoT Architectures

www.anastacia-h2020.eu http://www.anastacia-h2020.eu

http://youtube.anastacia-h2020.eu

http://twitter.anastacia-h2020.eu

http://linkedin.anastacia-h2020.eu

http://youtube.anastacia-h2020.eu

http://twitter.anastacia-h2020.eu

http://linkedin.anastacia-h2020.eu

ANASTACIA has received funding from the European Union’s Horizon 2020

Research and Innovation Programmeunder Grant Agreement N° 731558

and from the Swiss State Secretariat for Education, Research and Innovation.

http://www.anastacia-h2020.eu

http://youtube.anastacia-h2020.eu

http://twitter.anastacia-h2020.eu

http://linkedin.anastacia-h2020.eu


Internet of threats - the home of IoT news, analysis and ... · IoT security risks Iot threat detection IoT network security IoT encryption ioT security analytics IoT API security

Internet of threats - the home of IoT news, analysis and ... · IoT security risks Iot threat detection IoT network security IoT encryption ioT security analytics IoT API security

IoT Security Testing - Deloitte United States · IoT Security Testing Benefits of IoT Security Testing Despite a complex IoT product architecture, IoT security testing (IST) is beneficial

IoT Security Testing - Deloitte United States · IoT Security Testing Benefits of IoT Security Testing Despite a complex IoT product architecture, IoT security testing (IST) is beneficial

IoT Meetup Budapest - The Open-CPS approach

IoT Meetup Budapest - The Open-CPS approach

IOT SECURITY: CHALLENGES, SOLUTIONS & FUTURE PROSPECTS · 2021. 2. 27. · This article considers IoT security challenges, security requirements for IoT architecture, current security

IOT SECURITY: CHALLENGES, SOLUTIONS & FUTURE PROSPECTS · 2021. 2. 27. · This article considers IoT security challenges, security requirements for IoT architecture, current security

Security Challenges inEmerging Technologies IoT &Wearablessecurity.ingrammicro.com/security/media/Security-Media-Library/... · Security Challenges in Emerging Technologies IoT &

Security Challenges inEmerging Technologies IoT &Wearablessecurity.ingrammicro.com/security/media/Security-Media-Library/... · Security Challenges in Emerging Technologies IoT &

IoT security patterns

IoT security patterns

- X.509 PKI EMAIL SECURITY G - Commerzbank AGca.commerzbank.com/cps/Commerzbank_CP_CPS_eMail_Gateway.pdf · CP & CPS für das eMail Security Gateway Commerzbank AG - eMail Security

- X.509 PKI EMAIL SECURITY G - Commerzbank AGca.commerzbank.com/cps/Commerzbank_CP_CPS_eMail_Gateway.pdf · CP & CPS für das eMail Security Gateway Commerzbank AG - eMail Security

-1- IoT, CPS, & Security issues of embedded devices Yasuyoshi Uemura President Electronic Commerce Security Technology Research Association July 8 th 2015,

-1- IoT, CPS, & Security issues of embedded devices Yasuyoshi Uemura President Electronic Commerce Security Technology Research Association July 8 th 2015,

IOT SECURITY MARKET REPORT 2017-2022 · IOT SECURITY MARKET REPORT 2017-2022 IOT SECURITY MARKET REPORT ... 1 IoT Security Overview 7 ... 5.5.1 Security by design best practices and

IOT SECURITY MARKET REPORT 2017-2022 · IOT SECURITY MARKET REPORT 2017-2022 IOT SECURITY MARKET REPORT ... 1 IoT Security Overview 7 ... 5.5.1 Security by design best practices and

How to Future-Proof IoT Security · •Current Internet of Things (IoT) landscape •IoT threats •The IoT security problem •Building in device security •Future proofing •PKI

How to Future-Proof IoT Security · •Current Internet of Things (IoT) landscape •IoT threats •The IoT security problem •Building in device security •Future proofing •PKI

CPS 512 Computer Security Private Key Algorithms RSA SSL CPS 290Page 1.

CPS 512 Computer Security Private Key Algorithms RSA SSL CPS 290Page 1.

IoT4CPS – Trustworthy IoT for CPS

IoT4CPS – Trustworthy IoT for CPS

Scaling IoT Security

Scaling IoT Security

Emerging Technologies: IoT, Big Data, and CPS with Sensory … · 2019. 7. 30. · Editorial Emerging Technologies: IoT, Big Data, and CPS with Sensory Systems Qing Tan ,1 Nashwa

Emerging Technologies: IoT, Big Data, and CPS with Sensory … · 2019. 7. 30. · Editorial Emerging Technologies: IoT, Big Data, and CPS with Sensory Systems Qing Tan ,1 Nashwa

Internet of Things (IoT) / Cyber-physical Systems (CPS) · Internet of Things (IoT) / Cyber-physical Systems (CPS) Chair: Sebastian Engell TU Dortmund (TUDO), Germany Co-Chair: Tariq

Internet of Things (IoT) / Cyber-physical Systems (CPS) · Internet of Things (IoT) / Cyber-physical Systems (CPS) Chair: Sebastian Engell TU Dortmund (TUDO), Germany Co-Chair: Tariq

The IoT Hacker’s Toolkit - Security, CTFs, HackingGoals of IoT Security Researcher Understand IoT Devices Functions Security Properties Find Vulnerabilities Improve Security CVEs

The IoT Hacker’s Toolkit - Security, CTFs, HackingGoals of IoT Security Researcher Understand IoT Devices Functions Security Properties Find Vulnerabilities Improve Security CVEs

IT Security Seminar Cougar CPS

IT Security Seminar Cougar CPS

CIS 700/002 : Special Topics : Security of Embedded Systems, Cyber-Physical Systems ... › cis700-002 › talks › course... · 2017-01-14 · Why EMBS/CPS/IoT security? to the

CIS 700/002 : Special Topics : Security of Embedded Systems, Cyber-Physical Systems ... › cis700-002 › talks › course... · 2017-01-14 · Why EMBS/CPS/IoT security? to the

Security by Design for Sustainable CPS

Security by Design for Sustainable CPS

Cyber Physical Systems (IoT) Security · Cyber Physical Systems • CPS (i.e., internet of things—IoT) is a large-scale, geographically dispersed, federated, heterogeneous, and

Cyber Physical Systems (IoT) Security · Cyber Physical Systems • CPS (i.e., internet of things—IoT) is a large-scale, geographically dispersed, federated, heterogeneous, and