1. Securing Things
RIPE-74
Eliot Lear

2. What do we wish to avoid

3. The REAL Problem: Number of Types of Things
If we simply talk about 50bn things, we are missing the point. Apple has 1bn things and knows how to manage them. So does Google. Our problem is the number of types of things. We don’t even know how to count types of things. $ $

4. Who are the actors? Consumers / Enterprises Manufacturers
Use the things and connect them to the their networks
Manufacturers
Build the things
May run services the things use
Provide updates to things (hopefully)
Network vendors
Provide infrastructure to consumers and service providers
Service Providers
Connect consumers and enterprises to the Internet
Governments
Provide regulatory frameworks
???

5. What makes things different?
Single or small number of uses
Thermostat
Sling Box
Lightbulb
Door lock
HVAC
Thing Manufacturers are experts in their domains, and not networking.

6. A common design pattern: the cloud
Clouds offer-
A rendezvous point
Substantial processing power
Cloud capabilities will continue to expand.

7. General Threats To Defend Against
Attacker causes device to not perform its function or to malfunction
Attacker uses device to attack other systems
By AMIR MARINE (Wikimedia) - Own work, CC BY-SA 3.0,

8. Who do we ask questions of?
Consumers are not in a good position to determine what access a Thing needs
Never ask someone a question if you have no reason to believe they know the answer
Manufacturers know the answer to the question
We need to ask them
How to present this back to the consumer?

9. Questions
What role do service providers want to play?
What role can service providers play?
What do we need from manufacturers?
What is the role of governments?

10. Discussion