Securing the Internet of Everything Why it is Really, Really Matters TALKING ABOUT MIST – WHAT THE CLOUD IS MADE OF JERRY L. ARCHER, CSO & FOUNDING BOARD MEMBER CLOUD SECURITY ALLIANCE

Because your toilet will have all of your really personal data!

Because your car may be called to testify against you!

Because the airliner you will be flying in, is a connected Thing!

Because the Nuclear Power Plant nearby is a Thing.

Because it will drive human evolution!

And, because these Things will generate 19 trillion in revenue by John Chambers CISCO 50 Billion Connected Devices

What is needed? Redefinition of security boundaries Redefinition of security boundaries MIST is as much about action as it is data.. Security needs to reflect a new reality MIST is as much about action as it is data.. Security needs to reflect a new reality Elemental Security. The embedded applications must be self-defend – new coding techniques, testing methods. Elemental Security. The embedded applications must be self-defend – new coding techniques, testing methods. Containment – failures must be contained and acceptable. FMEA is a path to understanding. Containment – failures must be contained and acceptable. FMEA is a path to understanding. Trust can never be assumed. Every element must check the sanity of input before action. Trust can never be assumed. Every element must check the sanity of input before action. Tools for monitoring, blocking, etc. Tools for monitoring, blocking, etc. Radical Innovation – Game changers

The next 5-10 years. MIST Systems will know who we are and to have significant influence on our actions - perhaps in ways we won't understand. Even what we think. Government will leverage big data from all of the intelligent devices. The integration of technology and humans allowing us to choose who and what we are. Legal protections will be extended to systems, redefining data ownership? Significant diffusion of computing, resulting in disintermediation of traditional government and business models, creating diffuse accountability or attribution. No opt out...essential services only provided via the Net. When you get to a fork in the road take it!