INF-108

Segurança da Informação

Segurança – Internet das Coisas

Prof. João Henrique Kleinschmidt

Definição

• “Internet of Things envisions a self-configuring, adaptive, complex network that interconnects ’things’ to the Internet through the use of standard communication protocols. The interconnected things have physical or virtual representation in the digital world, sensing/actuation capability, a programmability feature and are uniquely identifiable. The representation contains information including the thing’s identity, status, location or any other business, social or privately relevant information. The things offer services, with or without human intervention, through the exploitation of unique identification, data capture and communication, and actuation capability. The service is exploited through the use of intelligent interfaces and is made available anywhere, anytime, and for anything taking security into consideration.”

Towards a definition of the Internet of Things (IoT) – Revision 1 – 2015 – IEEE Internet Initiative

Internet das Coisas (modelo)

Arquitetura IoT (networking)

Privacidade

Desafios de segurança em IoT

Desafios de segurança em IoT

• Hardware com requisitos mínimos

• Hardware a prova de adulteração

• Hardware seguro e com atualizações seguras

• Manter chaves em segurança

• Metodologia de desenvolvimento de software seguro

• Integração com segurança

• Auditoria da infraestrutura de IoT

Padronização de protocolos - IoT

• Existe a necessidade de padronização de protocolos para IoT

• Pilha de protocolos de baixo consumo de energia, confiável e compatível com a Internet

• Camada física/enlace: RFID, IEEE 802.15.x, LoRa, NB-IoT, etc

• Camada de rede: 6LoWPAN, RPL

• Camada de transporte: TCP/UDP

• Camada de aplicação: CoAP, MQTT

• Segurança: TLS, DTLS, IPSec?

Exemplo: LoRaWAN

Referências

• Mario Frustaci, Pasquale Pace , Gianluca Aloi, Member, and Giancarlo Fortino. Evaluating Critical Security Issues of the IoT World: Present and Future Challenges. IEEE Internet of Things Journal, Vol. 5, No. 4, August 2018.

• Shui Yu, Guojun Wang, Xiting Liu, and Jianwei Niu. Security and Privacy in the Age of the Smart Internet of Things: An Overview from a Networking Perspective. IEEE Communications Magazine, September 2018.