M2M & Cybersecurity Workshop TIA 2013 M2M Standards and Security. Mihai Voicu CIO/CSO ILS Technology LLC

Size: px
Start display at page:

Download "M2M & Cybersecurity Workshop TIA 2013 M2M Standards and Security. Mihai Voicu CIO/CSO ILS Technology LLC"

Transcription

1 M2M & Cybersecurity Workshop TIA 2013 M2M Standards and Security Mihai Voicu CIO/CSO ILS Technology LLC

2 Topics 1 What is the role of standardization in security for M2M solutions? 2 How are TIA and other M2M standards bodies addressing the issue today? 3 What can we expect relative to Cyber Security as standards are defined and adopted? 2013 ILS Technology LLC 2

3 Enabling Smart Services through Secure Remote Access, Monitoring and Connectivity 2013 ILS Technology LLC 3 3

4 2013 ILS Technology LLC 4 4

5 Who am I? Chief Information / Security ILS Technology LLC CISM/CRISC/CEH certifications Responsible for the infrastructure and security of the securewise and devicewise M2M solutions. TIA TR-50 M2M Smart Device Communication Engineering Committee Chair of the WG5 Capabilities Group Vice-Chair of the WG3 Security Group TIA Interview ( Editor of the WG2 Protocol Group Articles/Whitepapers devicewise M2M Application Framework Security White Paper ( Remote Access Management for IC makers ( Contacts: E: mvoicu@ilstechnology.com P: ILS Technology LLC 5

6 What is the role of standardization in security for M2M solutions? ILS Technology LLC 6

7 Anything Anywhere to Any Application Fleet Tracking Industrial Machines Building Automa9on Smart Energy BIG data 2013 ILS Technology LLC 7

8 Space Definition 2013 ILS Technology LLC 8

9 Where is M2M / IoT today? by English ar5st William Hogarth which depicts a comic scene of a violinist driven to distrac5on by the cacophony outside his window 2013 ILS Technology LLC 9

10 Security Pillars 2013 ILS Technology LLC 10

11 M2M Components HW SW Data Hardware, sofware and data/informa5on main ingredients of M2M solu5ons 2013 ILS Technology LLC 11

12 How to protect the data? 2013 ILS Technology LLC 12

13 Security Areas for M2M Solutions Authorization and Authentication RBAC - Role-based Access Control Data Validation Session Management Data Integrity and Confidentiality Auditing and Monitoring Trusted Environment 2013 ILS Technology LLC 13

14 Architecture Incorporate security features / capabili5es into the architecture as early as possible 2013 ILS Technology LLC 14

15 Device(s) Inden5fy en55es, interconnec5vity protocols and deployment/implementa5on should be considered by any M2M standards organiza5ons 2013 ILS Technology LLC 15

16 CIA To fulfill the security pillars, standards should be able to deal with authen5ca5on, authoriza5on, accountability, encryp5on and/or privacy ILS Technology LLC 16

17 How are TIA and other M2M standards bodies addressing the issue today? ILS Technology LLC 17

18 GSC- MSTF 160 organiza5ons ac5vely interested in M2M 2013 ILS Technology LLC 18

19 IUT-T NGN CEN Smart Metering ISO/IEC JTC1 UWSN CENELEC Smart Metering ESMIG Metering HGI Home Gateway Initiative W3C IPSO IPV6 Hardware and Protocols OMA ISO ZCL OASIS NIST IETF ROLL Routing over Low Power Lossy Networks ZigBee Alliance. ZB Application Profiles IETF 6LowPAN Phy-Mac Over IPV6 3GPP SA1, SA3,, GSMA SCAG, IEEE 802.xx.x W-Mbus WOSA KNX EPCGlobal GS1 Utilities Metering OPC Industry based standards organiza5ons are very ac5ve on their ver5cals 2013 ILS Technology LLC 19

20 M2M Market and Standards Organizations USA - Telecommunications Industry Association (TIA) Switzerland - ITU USA Eclipse Foundation EU - European Telecommunications Standards Institute (ETSI) USA - ATIS - Alliance for Telecommunications Industry Solutions JAPAN - Association of Radio Industries and Businesses (ARIB) CHINA - China Communications Standards Association (CCSA) JAPAN - Telecommunication Technology Committee (TTC) South KOREA - Telecommunications Technology Association (TTA) USA - IEEE - USA NIST ILS Technology LLC 20

21 WG1 Architecture Conformance and Tes5ng WG6 WG2 Protocol TR-50 Capabili5es WG5 WG3 Security WG4 Informa5on Models and Standard Objects 2013 ILS Technology LLC 21

22 Technical Committee Machine-to-Machine communications WG1 - Requirements & Use Cases WG2 Functional Architecture WG3 Protocols WG4 Security TR Threat analysis & counter measures to M2M service layer WG5 Management Working Groups: WG1 - Requirements WG2 Architecture WG3 Protocols WG4 Security WG5 Management, Abstraction and Semantics 2013 ILS Technology LLC 22

23 OMA Applica5on Layer Security Common Func5ons V1.1 M2M service layer: Requirements and architectural framework - M2M- O- 034 Machine to Machine (M2M) Communica5ons Technical Report - IEEE 's Machine- to- Machine (M2M) Task Group MQTT - Protocol M2M & the Internet of Things (IoT) - ISO/IEC/IEEE P first joint ISO/IEC/IEEE P XMPP Interface Standard and its built- in capabili5es against cyber- adack 2013 ILS Technology LLC 23

24 What can we expect relative to cybersecurity as standards are defined and adopted? ILS Technology LLC 24

25 Risks Increasing the complexity could introduce vulnerabilities and increase exposure to potential attackers Interconnected networks can introduce common vulnerabilities Increasing vulnerabilities to communication disruptions and the introduction of malicious software/ firmware or compromised hardware could result in denial of service (DoS) or other malicious attacks Increased number of entry points and paths are available for potential paths to exploit Interconnected systems can increase the amount of private information exposed and increase the risk when data is aggregated Increased use of new technologies can introduce new vulnerabilities Expansion of the amount of data that will be collected that can lead to the potential for compromise of data confidentiality, including the breach of customer privacy 2013 ILS Technology LLC 25

26 IT Cloud M2M Security Telco SW HW These sectors have exis5ng cyber security standards to address vulnerabili5es and assessment programs to iden5fy known vulnerabili5es in their systems 2013 ILS Technology LLC 26

27 Regulations Standards Cyber Security Preven5on, detec5on, response and recovery will determine what M2M solu5ons will need from standards and regula5ons 2013 ILS Technology LLC 27

28 Thank You! 2013 ILS Technology LLC 28

Machine-to-Machine Technologies

Machine-to-Machine Technologies Machine-to-Machine Technologies Vision, Standards and Applications Mischa Dohler Coordinator of Research, CTTC Distinguished Lecturer, IEEE Editor-in-Chief, ETT BoD, Worldsensing Chair Professor, KCL (1

More information

ETSI M2M / onem2m and the need for semantics. Joerg Swetina (NEC) (joerg.swetina@neclab.eu)

ETSI M2M / onem2m and the need for semantics. Joerg Swetina (NEC) (joerg.swetina@neclab.eu) ETSI M2M / onem2m and the need for semantics Joerg Swetina (NEC) (joerg.swetina@neclab.eu) Outline of this presentation A simple picture of Machine-to-Machine (M2M) communications Where do standards apply

More information

MACHINE TO MACHINE COMMUNICATIONS. ETSI TC M2M Overview June 2011

MACHINE TO MACHINE COMMUNICATIONS. ETSI TC M2M Overview June 2011 MACHINE TO MACHINE COMMUNICATIONS ETSI TC M2M Overview June 2011 About the ETSI TC M2M ETSI: the European Telecommunication Standards Institute One of the 3 European SDOs (CEN, CENELEC, ETSI). ETSI is

More information

Interna'onal Standards Ac'vi'es on Cloud Security EVA KUIPER, CISA CISSP EVA.KUIPER@HP.COM HP ENTERPRISE SECURITY SERVICES

Interna'onal Standards Ac'vi'es on Cloud Security EVA KUIPER, CISA CISSP EVA.KUIPER@HP.COM HP ENTERPRISE SECURITY SERVICES Interna'onal Standards Ac'vi'es on Cloud Security EVA KUIPER, CISA CISSP EVA.KUIPER@HP.COM HP ENTERPRISE SECURITY SERVICES Agenda Importance of Common Cloud Standards Outline current work undertaken Define

More information

This Specification is provided for future development work within onem2m only. The Partners accept no liability for any use of this Specification.

This Specification is provided for future development work within onem2m only. The Partners accept no liability for any use of this Specification. This Specification is provided for future development work within onem2m only. The Partners accept no liability for any use of this Specification. The present document has not been subject to any approval

More information

Main Research Gaps in Cyber Security

Main Research Gaps in Cyber Security Comprehensive Approach to cyber roadmap coordina5on and development Main Research Gaps in Cyber Security María Pilar Torres Bruna everis Aerospace and Defence Index CAMINO WP2: Iden8fica8on and Analysis

More information

ISO/IEC JTC 1/WG 10 Working Group on Internet of Things. Sangkeun YOO, Convenor

ISO/IEC JTC 1/WG 10 Working Group on Internet of Things. Sangkeun YOO, Convenor ISO/IEC JTC 1/WG 10 Working Group on Internet of Things Sangkeun YOO, Convenor History ISO/IEC JTC 1/SWG 5 (2013 ~ ) In JTC 1 Plenary 2014, Special Working on IoT (SWG 5) proposed to establish a subcommittee

More information

Management and Provisioning of M2M Devices and Applications

Management and Provisioning of M2M Devices and Applications Management and Provisioning of M2M Devices and Applications Musa Unmehopa Technical Plenary Chairman, OMA Director of Standards, Alcatel-Lucent M2M devices outnumber mobile devices by an order of magnitude

More information

ITU WORK ON INTERNET OF THINGS

ITU WORK ON INTERNET OF THINGS ITU WORK ON INTERNET OF THINGS Presentation at ICTP workshop 26 March 2015 Cosmas Zavazava Chief, Projects and Knowledge Management Department International Telecommunication Union ITU HEADQUARTERS, GENEVA

More information

Security testing the Internet-of-things

Security testing the Internet-of-things Security testing the Internet-of-things Lindholmen Software Development Day 2014-10-16 Emilie Lundin Barse Informa(on Security Consultant, Combitech emilie.barse@combitech.se Contents State of security

More information

Maintaining Herd Communication - Standards Used In IT And Cyber Security. Laura Kuiper

Maintaining Herd Communication - Standards Used In IT And Cyber Security. Laura Kuiper Maintaining Herd Communication - Standards Used In IT And Cyber Security Laura Kuiper So what is Cyber Security? According to ITU-T X.1205 Cybersecurity is the collection of tools, policies, security concepts,

More information

Attacking the roadblocks preventing aggressive adoption of Cloud Standards:

Attacking the roadblocks preventing aggressive adoption of Cloud Standards: Attacking the roadblocks preventing aggressive adoption of Cloud Standards: How SNIA and other standards orgs are developing standards that benefit high priority use cases. John Eastman, CTO, Presented

More information

How To Create An Internet Of Things (Iot) Platform For A Smartwatch And Other Devices

How To Create An Internet Of Things (Iot) Platform For A Smartwatch And Other Devices Jong-Tae Park Center for U- Convergence Network, Kyungpook National University, Korea IoT Devices IoT Devices Fitbit Smart Watch (Pebble, Samsung, Apple) Smart Slipper (24eight) Hapifork (Hapilabs) Smart

More information

Achievements and ongoing work in the ITU-T standardization of the Internet of Things

Achievements and ongoing work in the ITU-T standardization of the Internet of Things ITU Workshop on Standardization on IMT, M2M, IoT, Cloud Computing and SDN (Algiers, Algeria, 8 September 2013) Achievements and ongoing work in the ITU-T standardization of the Internet of Things Marco

More information

WHITE PAPER ON SECURITY TESTING IN TELECOM NETWORK

WHITE PAPER ON SECURITY TESTING IN TELECOM NETWORK WHITE PAPER ON SECURITY TESTING IN TELECOM NETWORK DATE OF RELEASE: 27 th July 2012 Table of Contents 1. Introduction... 2 2. Need for securing Telecom Networks... 3 3. Security Assessment Techniques...

More information

SMART IoT PROTOCOLS. Creating the Living Network. Chonggang Wang Innovation Lab, InterDigital Communications. December 8, 2014

SMART IoT PROTOCOLS. Creating the Living Network. Chonggang Wang Innovation Lab, InterDigital Communications. December 8, 2014 SMART IoT PROTOCOLS Chonggang Wang Innovation Lab, InterDigital Communications December 8, 2014 Creating the Living Network Content IoT Overview IoT Protocols C6-based Smart IoT Smart IoT Protocols Challenges

More information

Reduce Cost and Complexity of M2M and IoT Solutions via Embedded IP and Application Layer Interoperability for Smart Objects

Reduce Cost and Complexity of M2M and IoT Solutions via Embedded IP and Application Layer Interoperability for Smart Objects Reduce Cost and Complexity of M2M and IoT Solutions via Embedded IP and Application Layer Interoperability for Smart Objects Fabien Castanier STMicroelectronics IPSO Promoter M2M Forum - Milan, May 20,

More information

Securing Smart City Platforms IoT, M2M, Cloud and Big Data

Securing Smart City Platforms IoT, M2M, Cloud and Big Data SESSION ID: SSC-W10 Securing Smart City Platforms IoT, M2M, Cloud and Big Data Ibrahim Al Mallouhi Vice President - Operations Emirates Integrated Telecommunication Company (du) Roshan Daluwakgoda Senior

More information

How To Protect Your Network From Attack

How To Protect Your Network From Attack Liste von ausgewählten Cybersecurity-Normen, -Standards und -Richtlinien mit Smart-Grid-Relevanz: Advanced Security Acceleration Project Smart Grid (ASAP-SG): Entwicklung von Security Anforderungen für

More information

HGI s Ac)vi)es & Vision

HGI s Ac)vi)es & Vision HGI s Ac)vi)es & Vision OMA Home Environment Services Workshop Barcelona, February 23 rd, 2012 Hans Werner Bitzer, HGI Chairman hans- werner.bitzer@telekom.de CONNECTING HOMES ENABLING SERVICES (The information

More information

COSC 472 Network Security

COSC 472 Network Security COSC 472 Network Security Instructor: Dr. Enyue (Annie) Lu Office hours: http://faculty.salisbury.edu/~ealu/schedule.htm Office room: HS114 Email: ealu@salisbury.edu Course information: http://faculty.salisbury.edu/~ealu/cosc472/cosc472.html

More information

Bellevue University Cybersecurity Programs & Courses

Bellevue University Cybersecurity Programs & Courses Undergraduate Course List Core Courses: CYBR 250 Introduction to Cyber Threats, Technologies and Security CIS 311 Network Security CIS 312 Securing Access Control CIS 411 Assessments and Audits CYBR 320

More information

Guiding principles for security in a networked society

Guiding principles for security in a networked society ericsson White paper Uen 307 23-3230 February 2014 Guiding principles for security in a networked society The technological evolution that makes the Networked Society possible brings positive change in

More information

Smart Cities are the Internet of Things

Smart Cities are the Internet of Things June 20th, 2013 Smart Cities are the Internet of Things Zach Shelby, Chief Nerd 1 About Sensinode Vision The Internet of Things (IoT) is the next evolution of the Internet where devices of all types and

More information

Cybersecurity informa1on security exchange framework (CYBEX): importance and current developments

Cybersecurity informa1on security exchange framework (CYBEX): importance and current developments ISOG- J Seminar Tokyo 13 Oct 2010 V1.1 Cybersecurity informa1on security exchange framework (CYBEX): importance current developments Tony Rutkowski, tony@yaanatech.com Rapporteur for Cybersecurity Group,

More information

San Francisco Chapter. Presented by Mike O. Villegas, CISA, CISSP

San Francisco Chapter. Presented by Mike O. Villegas, CISA, CISSP Presented by Mike O. Villegas, CISA, CISSP Agenda Information Security (IS) Vision at Newegg.com Typical Issues at Most Organizations Information Security Governance Four Inter-related CoBIT Domains ISO

More information

Capabili'es for Strengthening Cybersecurity Resilience

Capabili'es for Strengthening Cybersecurity Resilience Capabili'es for Strengthening Cybersecurity Resilience In the Homeland Security Enterprise September 2012 DHS Cybersecurity Strategy A cyberspace that: Is Secure and Resilient Enables Innova=on Protects

More information

ZigBee IP Stack Overview Don Sturek Pacific Gas and Electric (PG&E) 2009 ZigBee Alliance. All rights reserved. 1

ZigBee IP Stack Overview Don Sturek Pacific Gas and Electric (PG&E) 2009 ZigBee Alliance. All rights reserved. 1 ZigBee IP Stack Overview Don Sturek Pacific Gas and Electric (PG&E) 1 Presenter Background Pacific Gas and Electric Company Northern and Central California Gas and Electric Utility Company (including San

More information

M2M Standardization and its perspectives

M2M Standardization and its perspectives M2M Standardization and its perspectives (ITU-T, ETSI, 3GPP) 2011. 11.11 윤 주 상 (동의대학교) jsyoun@deu.ac.kr 1 Contents Introduction - General M2M definition, Communication model, Properties of M2M applications

More information

Disrup've Innova'ons Track

Disrup've Innova'ons Track Disrup've Innova'ons Track Product Disrup-ons: Medical Device Cybersecurity Presenter: Adam Brand, Associate Director, Pro-vi- V. 1.1 FACULTY DISCLOSURE The faculty reported the following financial relationships

More information

Key requirements for Interoperable IoT systems

Key requirements for Interoperable IoT systems Key requirements for Interoperable IoT systems Pratul Sharma Technical Marketing Manager, ARM Inc. May/08/2014 Agenda Why Interoperability? Open standards for interoperability Data Communication Standards

More information

Mandate M-403: ehealth Interoperability. Karl Øyri Intervensjonseteret, Rikshospitalet HF

Mandate M-403: ehealth Interoperability. Karl Øyri Intervensjonseteret, Rikshospitalet HF Mandate M-403: ehealth Interoperability Karl Øyri Intervensjonseteret, Rikshospitalet HF M-403: Mandate to the European Standardisation Organisations CEN, CENELEC and ETSI in the field of Information

More information

M2M and the IT Infrastructure

M2M and the IT Infrastructure M2M and the IT Infrastructure Moderator: Bill Lesieur, Senior Analyst, Maravedis Inc Panelists: Fred Yentz, President & CEO, ILS Technology Lino Osegueda, Director OEM Relations, KORE Telematics Brian

More information

Secure Machine to Machine Communication on the example of Smart Grids

Secure Machine to Machine Communication on the example of Smart Grids Corporate Technology Secure Machine to Machine Communication on the example of Smart Grids 10.ITG Fachtagung Zukunft der Netze 2011, Steffen Fries Siemens AG, CT T, GTF IT Security : +49 89 636 53403 :

More information

PCI VERSION 2.0 AND RISK MANAGEMENT. Doug Landoll, CISSP, CISA, QSA, MBA Practice Director Risk and Compliance Management

PCI VERSION 2.0 AND RISK MANAGEMENT. Doug Landoll, CISSP, CISA, QSA, MBA Practice Director Risk and Compliance Management PCI VERSION 2.0 AND RISK MANAGEMENT Doug Landoll, CISSP, CISA, QSA, MBA Practice Director Risk and Compliance Management Objec&ve: Protect cardholder data (CHD) wherever it resides Applica&on: All card

More information

INTERNATIONAL TELECOMMUNICATION UNION

INTERNATIONAL TELECOMMUNICATION UNION INTERNATIONAL TELECOMMUNICATION UNION TELECOMMUNICATION STANDARDIZATION SECTOR STUDY PERIOD 2009-2012 English only Original: English Question(s): 4/17 Geneva, 11-20 February 2009 Ref. : TD 0244 Rev.2 Source:

More information

Building an Effec.ve Cloud Security Program

Building an Effec.ve Cloud Security Program Building an Effec.ve Cloud Security Program Laura Posey Senior Security Strategist, Microso3 Corpora6on Co- Chair, CSA CAIQ Programming Chair, NY Metro CSA Chapter Is Cloud worth it? Yes! Pla?orm for Innova.on

More information

External Supplier Control Requirements

External Supplier Control Requirements External Supplier Control s Cyber Security For Suppliers Categorised as Low Cyber Risk 1. Asset Protection and System Configuration Barclays Data and the assets or systems storing or processing it must

More information

EU Threat Landscape Threat Analysis in Research ENISA Workshop Brussels 24th February 2015

EU Threat Landscape Threat Analysis in Research ENISA Workshop Brussels 24th February 2015 EU Threat Landscape Threat Analysis in Research ENISA Workshop Brussels 24th February 2015 Aristotelis Tzafalias Trust and Security Unit H.4 DG Connect European Commission Trust and Security: One Mission

More information

The Internet of ANYthing

The Internet of ANYthing The of ANYthing Abstract It is projected that by 2020 there will be 50 billion things connected to the. This presents both unprecedented opportunity and challenge. In the global network of things, new

More information

Security in the Green Cloud

Security in the Green Cloud Security in the Green Cloud Smart and Green infrastructure symposium 2011 Prague May 19 th 2011 Steinthor Bjarnason sbjarnas@cisco.com 2011 Cisco and/or its affiliates. All rights reserved. Cisco Public

More information

Network Security Administrator

Network Security Administrator Network Security Administrator Course ID ECC600 Course Description This course looks at the network security in defensive view. The ENSA program is designed to provide fundamental skills needed to analyze

More information

RIOT CONTROL The Art of Managing Risk for Internet of Things

RIOT CONTROL The Art of Managing Risk for Internet of Things RIOT CONTROL The Art of Managing Risk for Internet of Things Kim Singletary McAfee Session ID: Session Classification: Advanced Intro What is IoT and why is it different? What are the risks? What are the

More information

Introduc)on to the IoT- A methodology

Introduc)on to the IoT- A methodology 10/11/14 1 Introduc)on to the IoTA methodology Olivier SAVRY CEA LETI 10/11/14 2 IoTA Objec)ves Provide a reference model of architecture (ARM) based on Interoperability Scalability Security and Privacy

More information

Submitted via dipak.singh@deity.gov.in and meenakshi.agarwal@deity.gov.in

Submitted via dipak.singh@deity.gov.in and meenakshi.agarwal@deity.gov.in Submitted via dipak.singh@deity.gov.in and meenakshi.agarwal@deity.gov.in October 31, 2014 Attn: Dipak Singh, Meenakshi Agarwal Ministry of Communications & Information Technology Government of India Electronics

More information

UPnP Internet of Things

UPnP Internet of Things UPnP Internet of Things July 2014 Keith Miller Intel Wouter van der Beek Cisco Systems, Inc. UPnP Internet of Things Task Force 2014 UPnP Forum Overview Scope Architecture Local components description

More information

M2M Technology: Challenges and Opportunities

M2M Technology: Challenges and Opportunities M2M Technology: Challenges and Opportunities Author Krishnan V, Bhaswar Sanyal Abstract: We are potentially at the juncture of a historical technology transformation, wherein embedded miniaturized intelligent

More information

Secure, Efficient, and Open Standard Internet of Things

Secure, Efficient, and Open Standard Internet of Things Secure, Efficient, and Open Standard Internet of Things Zach Shelby Director of Technology, IoT ARM acknowledges the trademarks and copyrights of 3 rd parties included in this presentation What is the

More information

Capabilities for Cybersecurity Resilience

Capabilities for Cybersecurity Resilience Capabilities for Cybersecurity Resilience In the Homeland Security Enterprise May 2012 DHS Cybersecurity Strategy A cyberspace that: Is Secure and Resilient Enables Innovation Protects Public Advances

More information

Preface Introduction

Preface Introduction Preface Introduction Cloud computing is revolutionizing all aspects of technologies to provide scalability, flexibility and cost-effectiveness. It has become a challenge to ensure the security of cloud

More information

Machine-to-Machine Communication (M2M) Devices, Networks, and Applications (DNA)

Machine-to-Machine Communication (M2M) Devices, Networks, and Applications (DNA) Machine-to-Machine Communication (M2M) Devices, Networks, and Applications (DNA) May 16, 2014 Ming Lai, Ph.D. mlai@connectilife.com 1 Outline 1. Overview of M2M Devices, Networks, and Applications 2. M2M

More information

Smart Grid Information Security

Smart Grid Information Security CEN-CENELEC-ETSI Smart Grid Coordination Group Date: 2014-12 Secretariat: CCMC CEN-CENELEC-ETSI Smart Grid Coordination Group M490-SGCG-SGIS-Intermediate-Report-V1.pdf 1 Contents Page 2 3 4 5 6 7 8 9 10

More information

Threat Intel Fail. The eroding threat intelligence landscape in the age of Internet of Things (IoT)

Threat Intel Fail. The eroding threat intelligence landscape in the age of Internet of Things (IoT) Threat Intel Fail The eroding threat intelligence landscape in the age of Internet of Things (IoT) Next Generation Security for the Next Generation Internet Joe Klein CEO and Founder Joe.Klein@Disrupt6.com

More information

Cloud Standards - A Telco Perspective

Cloud Standards - A Telco Perspective Cloud Standards - A Telco Perspective Abdellatif Benjelloun Touimi abdellatif.benjelloun@huawei.com Corporate Standards Department www.huawei.com TEN YEARS OF CONNECTING EUROPE HUAWEI TECHNOLOGIES CO.,

More information

This is a preview - click here to buy the full publication

This is a preview - click here to buy the full publication TECHNICAL REPORT IEC/TR 62443-3-1 Edition 1.0 2009-07 colour inside Industrial communication networks Network and system security Part 3 1: Security technologies for industrial automation and control systems

More information

NIS Direktive und Europäische sicherheitsrelevante Projekte Udo Helmbrecht Executive Director, ENISA

NIS Direktive und Europäische sicherheitsrelevante Projekte Udo Helmbrecht Executive Director, ENISA NIS Direktive und Europäische sicherheitsrelevante Projekte Udo Helmbrecht Executive Director, ENISA ViS!T - Verwaltung integriert sichere Informationstechnologie, Wien, 29.10.2014 European Union Agency

More information

NIST Email Security Improvements. William C. Barker and Scott Rose October 22, 2015 M3AAWG 35 th General Meeting

NIST Email Security Improvements. William C. Barker and Scott Rose October 22, 2015 M3AAWG 35 th General Meeting NIST Email Security Improvements William C. Barker and Scott Rose October 22, 2015 M3AAWG 35 th General Meeting Presenters Scott Rose Computer Scientist, NIST ITL William (Curt) Barker Guest Researcher,

More information

Draft ITU-T Recommendation X.805 (Formerly X.css), Security architecture for systems providing end-to-end communications

Draft ITU-T Recommendation X.805 (Formerly X.css), Security architecture for systems providing end-to-end communications Draft ITU-T Recommendation X.805 (Formerly X.css), architecture for systems providing end-to-end communications Summary This Recommendation defines the general security-related architectural elements that

More information

Introduction to Security

Introduction to Security 2 Introduction to Security : IT Security Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 25 October 2013 its335y13s2l01, Steve/Courses/2013/s2/its335/lectures/intro.tex,

More information

Computer Security Incident Handling Detec6on and Analysis

Computer Security Incident Handling Detec6on and Analysis Computer Security Incident Handling Detec6on and Analysis Jeff Roth, CISSP- ISSEP, CISA, CGEIT Senior IT Security Consultant 1 Coalfire Confiden+al Agenda 2 SECURITY INCIDENT CONTEXT TERMINOLOGY DETECTION

More information

Huawei Technologies ERC Position Statement: Towards a Future Internet Public Private Partnership

Huawei Technologies ERC Position Statement: Towards a Future Internet Public Private Partnership Huawei Technologies ERC Position Statement: Towards a Future Internet Public Private Partnership Kostas Pentikousis, Mirko Schramm, and Cornel Pampu Huawei Technologies European Research Centre Carnotstrasse

More information

GSM v. CDMA: Technical Comparison of M2M Technologies

GSM v. CDMA: Technical Comparison of M2M Technologies GSM v. CDMA: Technical Comparison of M2M Technologies Introduction Aeris provides network and data analytics services for Machine-to- Machine ( M2M ) and Internet of Things ( IoT ) applications using multiple

More information

Cloud Security & Standardization. Markku Siltanen Tietoturvakonsultti CISA, CGEIT, CRISC

Cloud Security & Standardization. Markku Siltanen Tietoturvakonsultti CISA, CGEIT, CRISC 0 Copyright 2011 FUJITSU Cloud Security & Standardization Markku Siltanen Tietoturvakonsultti CISA, CGEIT, CRISC Cloud computing 1 Copyright 2011 FUJITSU Characteristics of cloud 2 Copyright 2011 FUJITSU

More information

Cryptography and Network Security Overview & Chapter 1. Network Security. Chapter 0 Reader s s Guide. Standards Organizations.

Cryptography and Network Security Overview & Chapter 1. Network Security. Chapter 0 Reader s s Guide. Standards Organizations. Cryptography and Network Security Overview & Chapter 1 Fifth Edition by William Stallings Lecture slides by Lawrie Brown (with edits by RHB) Chapter 0 Reader s s Guide The art of war teaches us to rely

More information

Role of Sub-1GHz Communications in M2M/IoT Development

Role of Sub-1GHz Communications in M2M/IoT Development Brochure More information from http://www.researchandmarkets.com/reports/3044158/ Role of Sub-1GHz Communications in M2M/IoT Development Description: Considerable research was done using the Internet.

More information

How Do You Secure An Environment Without a Perimeter?

How Do You Secure An Environment Without a Perimeter? How Do You Secure An Environment Without a Perimeter? Using Emerging Technology Processes to Support InfoSec Efforts in an Agile Data Center PTC Briefing January 18, 2015 About the Presenters CHARLA GRIFFY-BROWN

More information

ITU-T Security Standard Activities

ITU-T Security Standard Activities ITU-T Security Standard Activities Koji NAKAO Information Security Fellow, KDDI Corporation Rapporteur, Security Management, Q7/SG 17, ITU-T Chair of ISO/IEC JTC 1/SC 27/WG 4, Japan, & Co-Chair of RAISS

More information

INTERNET OF THINGS ISSUES AND CHALLENGES

INTERNET OF THINGS ISSUES AND CHALLENGES INTERNET OF THINGS ISSUES AND CHALLENGES MIRKO FRANCESCHINIS Workshop on Scientific Applications for the Internet of Things (IoT) 16-27 March 2015, ICTP Trieste Pervasive Technologies ABOUT ME 2000 Telecommunication

More information

Cloud Computing Standards: Overview and ITU-T positioning

Cloud Computing Standards: Overview and ITU-T positioning ITU Workshop on Cloud Computing (Tunis, Tunisia, 18-19 June 2012) Cloud Computing Standards: Overview and ITU-T positioning Dr France Telecom, Orange Labs Networks & Carriers / R&D Chairman ITU-T Working

More information

future data and infrastructure

future data and infrastructure White Paper Smart Grid Security: Preparing for the Standards-Based Future without Neglecting the Needs of Today Are you prepared for future data and infrastructure security challenges? Steve Chasko Principal

More information

New York State Department of Financial Services. Report on Cyber Security in the Insurance Sector

New York State Department of Financial Services. Report on Cyber Security in the Insurance Sector New York State Department of Financial Services Report on Cyber Security in the Insurance Sector February 2015 Report on Cyber Security in the Insurance Sector I. Introduction Cyber attacks against financial

More information

A Scenario of Machine-to-Machine (M2M) Health Care Service

A Scenario of Machine-to-Machine (M2M) Health Care Service A Scenario of Machine-to-Machine (M2M) Health Care Service Jung-Ho Kim*, Ya-Ting Wei*, Jae-Oh Lee* * Dept. of Electrical, Electronics &, Korea University of Technology and Education, Korea {jungho32, weiyating,

More information

Security Perspectives for Collaborative Data Acquisition in the Internet of Things

Security Perspectives for Collaborative Data Acquisition in the Internet of Things Security Perspectives for Collaborative Data Acquisition in the Internet of Things Vangelis Gazis 1, Carlos Garcia Cordero 1,2 Emmanouil Vasilomanolakis 1,2, Panayotis Kikiras 1, and Alex Wiesmaier 1 1

More information

Protec'ng Informa'on Assets - Week 10 - Identity Management and Access Control. MIS 5206 Protec/ng Informa/on Assets Greg Senko

Protec'ng Informa'on Assets - Week 10 - Identity Management and Access Control. MIS 5206 Protec/ng Informa/on Assets Greg Senko Protec'ng Informa'on Assets - Week 10 - Identity Management and Access Control In the News Readings MIS5206 Week 10 Identity Management and Access Control Test Taking Tip Quiz In the News Discuss items

More information

Combining Security Risk Assessment and Security Testing based on Standards

Combining Security Risk Assessment and Security Testing based on Standards Jürgen Großmann (FhG Fokus) Combining Security Risk Assessment and Security Testing based on Standards SASSI Workshop Berlin, 2015-09-16 1 Getting guidance that match! Source: https://www.flickr.com/photos/maerskline/8432240103/in/photostream/

More information

Future cybersecurity threats and research needs.

Future cybersecurity threats and research needs. www.thalesgroup.com Future cybersecurity threats and research needs. 3 rd Franco-American Workshop on Cybersecurity Lyon Kreshnik Musaraj kreshnik.musaraj@thalesgroup.com December 9. 2014 2 / Challenges

More information

MAX DOLGICER THE INTERNET OF THINGS NAVIGATING THE FUTURE OF INFORMATION TECHNOLOGY

MAX DOLGICER THE INTERNET OF THINGS NAVIGATING THE FUTURE OF INFORMATION TECHNOLOGY LA TECHNOLOGY TRANSFER PRESENTS PRESENTA MAX DOLGICER THE INTERNET OF THINGS NAVIGATING THE FUTURE OF INFORMATION TECHNOLOGY DECEMBER 14-15, 2015 RESIDENZA DI RIPETTA - VIA DI RIPETTA, 231 ROME (ITALY)

More information

Securing the Interconnect Signaling Network Security

Securing the Interconnect Signaling Network Security Securing the Interconnect Signaling Network Security Travis Russell Director, Cyber Security, Service Provider Networks Oracle Communications August, 2015 Current security landscape Much attention has

More information

Future Directions for Internet of Things Work

Future Directions for Internet of Things Work Future Directions for Internet of Things Work Naming Architecture for Object to Object Communications 77 th IETF Anaheim, March 2010 Gyu Myoung Lee (gmlee@it-sudparis.eu)

More information

Embedded Java & Secure Element for high security in IoT systems

Embedded Java & Secure Element for high security in IoT systems Embedded Java & Secure Element for high security in IoT systems JavaOne - September 2014 Anne-Laure SIXOU - ST Thierry BOUSQUET - ST Frédéric VAUTE - Oracle Speakers 2 Anne-Laure SIXOU Smartgrid Product

More information

Cyber Security Controls Assessment : A Critical Discipline of Systems Engineering

Cyber Security Controls Assessment : A Critical Discipline of Systems Engineering Cyber Controls : A Critical Discipline of Systems 14 th Annual NDIA Systems San Diego, CA October 24-28, 2011 Bharat Shah Lockheed Martin IS&GS bharat.shah@lmco.com Purpose Provide an overview on integrating

More information

Part 2: ICT security standards and guidance documents

Part 2: ICT security standards and guidance documents Part 2: ICT security standards and guidance documents Version 3.0 April, 2007 Introduction The purpose of this part of the Security Standards Roadmap is to provide a summary of existing, approved ICT security

More information

Device Management for Internet of Things Constrained Devices OMA Lightweight M2M. Duncan Purves Connect2 Systems duncan@connect2.io http:connect2.

Device Management for Internet of Things Constrained Devices OMA Lightweight M2M. Duncan Purves Connect2 Systems duncan@connect2.io http:connect2. Device Management for Internet of Things Constrained Devices OMA Lightweight M2M Duncan Purves Connect2 Systems duncan@connect2.io http:connect2.io Why do we need Remote Device Management? The devices

More information

Enterprise Cybersecurity: Building an Effective Defense

Enterprise Cybersecurity: Building an Effective Defense : Building an Effective Defense Chris Williams Scott Donaldson Abdul Aslam 1 About the Presenters Co Authors of Enterprise Cybersecurity: How to Implement a Successful Cyberdefense Program Against Advanced

More information

IAEA 2015 INTERNATIONAL CONFERENCE ON COMPUTER SECURITY IN A NUCLEAR WORLD

IAEA 2015 INTERNATIONAL CONFERENCE ON COMPUTER SECURITY IN A NUCLEAR WORLD IAEA 2015 INTERNATIONAL CONFERENCE ON COMPUTER SECURITY IN A NUCLEAR WORLD A NEW IEC STANDARD FOR CYBERSECURITY FOR NUCLEAR POWER PLANTS: IEC 62645 - REQUIREMENTS FOR SECURITY PROGRAMS FOR COMPUTER-BASED

More information

M2M/IoT standards in ETSI and onem2m

M2M/IoT standards in ETSI and onem2m M2M/IoT standards in ETSI and onem2m Enrico Scarrone, ETSI TC Smart M2M Vice-Chairman, onem2m SC Vice Chairman Telecom Italia ALMANAC Workshop, Copenhagen, September 2015 TC SmartM2M (formerly TC M2M)

More information

Security Controls What Works. Southside Virginia Community College: Security Awareness

Security Controls What Works. Southside Virginia Community College: Security Awareness Security Controls What Works Southside Virginia Community College: Security Awareness Session Overview Identification of Information Security Drivers Identification of Regulations and Acts Introduction

More information

Attachment A. Identification of Risks/Cybersecurity Governance

Attachment A. Identification of Risks/Cybersecurity Governance Attachment A Identification of Risks/Cybersecurity Governance 1. For each of the following practices employed by the Firm for management of information security assets, please provide the month and year

More information

Dr. György Kálmán gyorgy@mnemonic.no

Dr. György Kálmán gyorgy@mnemonic.no COMMUNICATION AND SECURITY IN CURRENT INDUSTRIAL AUTOMATION Dr. György Kálmán gyorgy@mnemonic.no Agenda Connected systems historical overview Current trends, concepts, pre and post Stuxnet Risks and threats

More information

Internet Traffic Monitoring Tools and Analysis Smart- 2012-0046 - Standardiza=on -

Internet Traffic Monitoring Tools and Analysis Smart- 2012-0046 - Standardiza=on - Internet Traffic Monitoring Tools and Analysis Smart- 2012-0046 - Standardiza=on - Eunsook Eunah Kim(eunah.kim@martel- consul6ng.ch) 22. 04. 2015 3 rd Workshop of Smart- 2012-0046 Problem Standards have

More information

Security issues in Voice over IP: A Review

Security issues in Voice over IP: A Review www.ijecs.in International Journal Of Engineering And Computer Science ISSN:2319-7242 Volume 3 Issue 2 February, 2014 Page No. 3879-3883 Security issues in Voice over IP: A Review Rajni a, Preeti a, Ritu

More information

Mobile Weblink Security

Mobile Weblink Security Name Maryam Al- Naemi Date 11/01/2013 Subject ITGS higher level Title How safe is the informa@on we store on our smartphones? Area of impact Home & Leisure Social & Ethical Issue Security Ar:cle Smartphone

More information

A New Standards Project on Avoiding Programming Language Vulnerabilities

A New Standards Project on Avoiding Programming Language Vulnerabilities A New Standards Project on Avoiding Programming Language Vulnerabilities Jim Moore Liaison Representative from IEEE Computer Society to ISO/IEC JTC 1/SC 7 Liaison Representative between ISO/IEC JTC 1/SC

More information

Cloak and Secure Your Critical Infrastructure, ICS and SCADA Systems

Cloak and Secure Your Critical Infrastructure, ICS and SCADA Systems Cloak and Secure Your Critical Infrastructure, ICS and SCADA Systems Building Security into Your Industrial Internet Phillip Allison Tempered Networks Discussion topics Threats to network security TCP/IP

More information

Cloud Computing Governance & Security. Security Risks in the Cloud

Cloud Computing Governance & Security. Security Risks in the Cloud Cloud Computing Governance & Security The top ten questions you have to ask Mike Small CEng, FBCS, CITP Fellow Analyst, KuppingerCole This Webinar is supported by Agenda What is the Problem? Ten Cloud

More information

AWS Security & Compliance

AWS Security & Compliance AWS Public Sector Jerusalem 19 Nov 2014 AWS Security & Compliance CJ Moses General Manager, Government Cloud Solu3ons Security Is Our No.1 Priority Comprehensive Security Capabilities to Support Virtually

More information

A Funny Thing Happened On The Way To OASIS: From Specifications to Standards

A Funny Thing Happened On The Way To OASIS: From Specifications to Standards A Funny Thing Happened On The Way To OASIS: From Specifications to Standards Tom Millar Chief of Communications, US-CERT FIRST Berlin, June 18 th, 2015 Disclaimer This presentation is intended for informational

More information

Pilvipalveluiden tietoturvan standardisointi

Pilvipalveluiden tietoturvan standardisointi Pilvipalveluiden tietoturvan standardisointi Juha Röning Juha.Roning@oulu.fi Sisältö Standardien kirjo Pilvipalveluiden standardit Seurattavat standardit Standardit ja CSA Cloud Controls Matriisi Cloud

More information

How To Perform a SaaS Applica7on Inventory in. 5Simple Steps. A Guide for Informa7on Security Professionals. Share this ebook

How To Perform a SaaS Applica7on Inventory in. 5Simple Steps. A Guide for Informa7on Security Professionals. Share this ebook How To Perform a SaaS Applica7on Inventory in 5Simple Steps A Guide for Informa7on Security Professionals WHY SHOULD I READ THIS? This book will help you, the person in the organiza=on who cares deeply

More information