Smart Cities A sua cidade está preparada para um ataque cibernético? Prof. Dr. Fabiano Hessel

Transcription

1 Smart Cities A sua cidade está preparada para um ataque cibernético? Prof. Dr. Fabiano Hessel fabiano.hessel@pucrs.br

2 Smart City: Which one? Why?

3 Source: CISCO

4 New Ecosystem The IoT chip market size, in terms of value, is expected to grow from USD 4.58 Billion in 2015 to USD Billion by 2022 at a CAGR (Compound Annual Growth Rate) of 11.5% between 2016 and 2022 The smart cities market size is estimated to grow from USD Billion in 2015 to USD Billion by 2020, at a CAGR of 19.4%. The base year considered for the study is 2014 and the market size is forecasted from 2015 to Smart cities market has been segmented into four major focus areas across regions. The focus areas include transportation, utilities, buildings, and smart citizen services. Forecasts that 8.4 billion connected things will be in use worldwide in 2017, up 31% from 2016, and Accenture estimates the industrial Internet of Things (Industry 4.0) could add $14.2 trillion to the global economy by The ecosystem of hardware / software around IoT framework is under construction as now we are sure that the old operating systems and hardware may not be sufficient for Smart Cities - IoT s abilities.

5 Is the new paradise for the market, for the industry and for the cities? We must remain cautious, as advancements in IoT will come with grave consequences if it is not suitably protected. Common problems have been observed within the security of IoT and these issues are extremely vulnerable to hackers. So let s change the dynamics of security from the ground up. Proprietary closed source development is a recurring trait in IoT devices that have been breached; and even though this is seen as a more traditional approach, it is outdated.

6 Is the new paradise for the market, for the industry and for the cities? Firmware binary code is easily accessible online with debugging tools and interactive disassemblers such as jtag also available. Security by obscurity simply doesn t exist anymore if it ever did. Secure boot needs to be enforced as the firmware update system in today s devices is flawed in that it s not signed. The hackers behind the attacks were able reverse engineer the code, modify it, re-flash the firmware and reboot to execute arbitrary code.

7

8 Some vulnerabilities of IoT applications The potential for applications inside edge devices to be hijacked; Increasing accessibility through communications enabling (Distributed) Denialof-Service and Denial-of-Sleep attacks; The complexities of IoT systems targetting multiple sector verticals; The proliferation of internal interfaces and their introduction of weaknesses in advanced IoT solutions.

9 Security

10 Security e_doors_at_airports_hospitals/ m htm

11 Security Mirai is a huge disaster for the Internet of Things, Xiongmai said in an to IDG News Service. (We) have to admit that our products also suffered from hacker's break-in and illegal use. Mirai has been found spreading to at least 500,000 devices, according to internet backbone provider Level 3 Communications. Malware that can build botnets out of IoT devices was at least partly responsible for a massive distributed denial-ofservice attack that disrupted U.S. internet traffic on Friday, according to network security companies. (source: computerworld.com, October, 21, 2016 (last Friday))

12 Security

13 Major challenges for IoT ( ) IoT Security Security will be complicated by the fact that many "things" use simple processors and operating systems that may not support sophisticated security approaches (Edge device, Root of Trust) IoT Analytics New analytic tools and algorithms are needed now, but as data volumes increase through 2021, the needs of the IoT may diverge further from traditional analytics. IoT Device (Things) Management Tools must be capable of managing and monitoring thousands and perhaps even millions of devices. (source: Gartner, PRPL Foundation, IDC, McKynsei)

14 Major challenges for IoT ( ) Low Power, Short-Range IoT Networks Low-power, short-range networks will dominate wireless IoT connectivity through 2025, far outnumbering connections using wide-area IoT networks IoT Processors As with all hardware design, there are complex trade-offs between features, hardware cost, software cost, software upgradability and so on. As a result, understanding the implications of processor choices will demand deep technical skills IoT Operating Systems Traditional operating systems (OSs) such as Windows, Android and ios were not designed for IoT applications. (source: Gartner, PRPL Foundation, IDC, McKynsei)

15 Major challenges for IoT ( ) IoT Platforms IoT platforms bundle many of the infrastructure components of an IoT system into a single product. IoT Standards and Ecosystems Standards and their associated APIs will be essential because IoT devices will need to interoperate and communicate, and many IoT business models will rely on sharing data between multiple devices and organizations Many IoT ecosystems will emerge, and commercial and technical battles between these ecosystems will dominate areas such as the smart home, the smart city and healthcare. (source: Gartner, PRPL Foundation, IDC, McKynsei)

16 PUCRS Smart City Innovation Center The Smart City Innovation Center is located in the Tecnopuc and has cooperation with private Enterprises/Industries, Universities and Government Sectors. The Smart City Innovation Center is dedicated to help companies to improve and strength its competitiveness in the market by developing applied research and studies to find the best possible solution for the market challenges. The Innovation Center recently established an agreement with the Iot Innovation Center of Barcelona in order to act as a global player in this domain to develop join projects to help companies to find the best solution for your challenges considering the global market. The Innovation Center participates actively in the discussion about public policies for the Iot and Smart Cities in Brazil. Some participants of this discussions are: Cesar Innovation Center, FGV, Conpenhagen Institute for Futures Studies, Porto Digital, Porto Marinho, ADBI, BNDES among others. Also we participate in the elaboartion of the POETAS.IT document that summarizes the IoT vision for the country. This document is a public document that is being presented and discussed with some others entities as BRASSCOM, ABINEE, IoT Camera and some Brasilian Ministeries.

17 Smart City Innovation Center PRPL is a open-source, community-driven, non-profit foundation

18 Internet of Things A Major Challenge of Smart Cities/IoT Global Cooperation!!!

19 Thank You Prof. Dr. Fabiano Hessel