Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland
-
Upload
ec-council -
Category
Technology
-
view
99 -
download
1
Transcript of Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland
![Page 1: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/1.jpg)
Out Go The Lights An enlightening discussion of IoT automation security
![Page 2: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/2.jpg)
RESEARCH LEAD at
Deral Heiland CISSP
![Page 3: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/3.jpg)
Agenda
Understanding IoT
IoT Migration into the enterprise
Lighting automation exploitation
Securing IoT best practices
![Page 4: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/4.jpg)
Internet of Things (IoT)
![Page 5: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/5.jpg)
Typical traits of an IoT based technology
Interrelated devices
Collecting and sharing data
Networked together
Embedded electronics
![Page 6: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/6.jpg)
Cloud
Mobile
Hardware
Network
Data
The ecosystem approach allows us to:
The ability to more thoroughly examine the technologies overall security
Better define the security risk and impact
Deploy IoT solutions in a more secure manner
![Page 7: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/7.jpg)
Mobile
Application
Communication
Storage
Authentication
![Page 8: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/8.jpg)
Cloud
Authentication
Communication
Encryption
Data storage
Web attacks
![Page 9: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/9.jpg)
Network
Protocols
Communications
Encryption
Replay, Spoofing attacks
![Page 10: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/10.jpg)
Hardware
CPU
Physical
Firmware
![Page 11: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/11.jpg)
IoT Migration into the Enterprise
![Page 12: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/12.jpg)
They’re Here
Wearable
Lighting
HVAC
Power Management
Audio Video systems
![Page 13: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/13.jpg)
Lighting Automation Exploitation
![Page 14: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/14.jpg)
Automation Exploits
Mobile Application
Embedded Web
Communication Protocols
Local / Direct connect services
![Page 15: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/15.jpg)
Mobile Applications
Unencrypted storage
Unencrypted communication
IOS home button screen shot
No SSL Pinning
![Page 16: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/16.jpg)
Embedded Web
Cross site scripting
Cross site request forgery
![Page 17: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/17.jpg)
![Page 18: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/18.jpg)
Communication protocols
Zigbee
Ethernet
Zwave
WiFi
![Page 19: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/19.jpg)
![Page 20: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/20.jpg)
Local Connect
Unencrypted
Unauthenticated
#Set up data to send to port 4000 $data1 = "\x83\x00\x00\xe3\x03\x00\x00\x00\x01"; $data2 = pack('a33',"$SSID"); $data3 = pack('a69',"$WPAPSK"); $data4 = "\x04\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"; $send_data = join "", $data1, $data2, $data3, $data4;
!
![Page 21: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/21.jpg)
Securing IoT Best Practices
![Page 22: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/22.jpg)
Best Practices
Identification
Business needs
Isolation / Segmentation
Patch management
![Page 23: Out Go The Lights: An enlightening discussion of IoT automation security By Deral Heiland](https://reader031.fdocuments.net/reader031/viewer/2022030316/5874f6411a28ab917a8b7f6b/html5/thumbnails/23.jpg)