1. Elevators The Basics & Potential Future Vulnerabilities

2. Who am I? wizzy @the_wizzy_ Spent exactly 4000 days as an elevator technician Now a Penetration Tester Cool guy?

3. Obligatory Safety Warning!!!!!

5. Agenda Elevator basics More recent technologies IoT & Elevators… WTF?#$!

6. Basic Types of Elevators Traction http://www.archtoolbox.com

7. Basic Types of Elevators Traction Hydraulic http://elevation.wikia.com

8. Basic Types of Elevators Traction Hydraulic Drum driven http://www.liftequip.de

9. Safety Systems Overspeed Governor Electrical Overspeed Switch Mechanical Overspeed Lock Rope to Elevator Car

10. Safety Systems Overspeed Governor Safety Circuit 2 Speed AC - Simplified

11. Safety Systems Overspeed Governor Safety Circuit Door Locks 2 Speed AC - Simplified

12. Safety Systems Overspeed Governor Safety Circuit Door Locks Rope Brake

13. Control Systems 1960s – Relay Based

14. Control Systems 1960s – Relay Based 1970s – Enter Electronics

15. Control Systems 1960s – Relay Based 1970s – Enter Electronics 1980s - Microprocessors

16. Control Systems 1960s – Relay Based 1970s – Enter Electronics 1980s - Microprocessors 1990s – Smaller!

17. Shaft Access - DANGER Trap Door

18. Shaft Access - DANGER Trap Door Access Device (Landing Doors)

19. Shaft Access - DANGER Trap Door Access Device (Landing Doors) Access Door

20. Communication Electrically (Relays) Parallel Communication Serial (CAN bus, rs422/485)

21. Car Operating Panel Key Switches Open the panel Fire Service overrides security

22. Basics Are Over! Very brief introduction If you want to talk more come see me

23. Where to next? So ….. You don’t have an oscilliscope or protocol analyser? Just a laptop?

24. Elevator Management System Provide real time Elevator monitoring Store information about trips Often built on old software Updates?!@#?!

25. Display Screens Look Fancy Often Windows XP Embedded IP connected VDSL Updates?!@#?!

26. Destination Control Better Elevator dispatching Common service codes Commonly IP/Ethernet Network Security?!!@? Compass, PORT, DCS

27. Internet of Things Kone / Microsoft ThyssenKrupp / IBM Adaptive Servicing Where do you want to go? Scared?

28. It is time to take the stairs!

29. Questions? wizzy @the_wizzy_ http://ow.ly/Ce87f http://elevation.wikia.com/ http://www.elevatorbobs-elevator-pics.com