1. MULTI LAYERED IOT SECURITY & PRIVACY RATINGS
ITU DUBAI
MARCH 2017
MULTI LAYERED
IOT SECURITY
&
PRIVACY RATINGS
ANKUSH JOHAR

2. AGENDA
HACKABILITY
SECURITY
PRIVACY

3. HOW SECURE IS IT HERE?
15,193+
HACKABLE IOT DEVICES
Preliminary research done on Shodan + Censys
Results show that 15,000+ devices can be recruited by malicious hackers right here & now
...and this is a very conservative estimate.
Enough to mount a DDoS attack right now!

4. IoT Cyber Threats: High
Cyber Attacks against IoT
UP 4.5X
YoY
There are 2 types of CXOs – Those who know they’ve been hacked and those who don’t.
Its not about ‘IF’ you will be hacked. Its about ‘WHEN’.
Source: NICT Courtesy: Masayoshi Son of SoftBank

5. WF Multi-Layered IoT Security Model
A FIRM WAY TO SUCCEED IN IOT SECURITY
ENDPOINT
CONNECTIVITY
DATA/APPLICATION
SECURE THE ENDPOINT.
ENDPOINTS VARY HUGELY
CLASSIFY AS MUCH AS POSSIBLE TO PROTECT
SECURE THE NETWORK
BUILD NETWORK INTELLIGENCE FOR EARLY DETECTION & PROACTIVE PREVENTON
SECURE THE DATA
SECURE APPLICATIONS THAT RUN ON THE CLIENT SIDE AS WELL AS THE SERVER SIDE
SEGMENT . SEGMENT . SEGMENT
EXAMPLE: CONNECTED CARS - SEGREGATE THE TELEMATICS (CRITICAL FUNCTIONS) FROM THE ENTERTAINMENT SYSTEM IN A CAR. SET UP SECURE CHANNELS OF COMMS FOR TELEMATICS TO IT DOESN’T TAKE AWAY FROM USER EXPERIENCE EITHER.

6. Conformity to standards
Presentation by Ankush Johar - ITU 2017 Dubai 1

7. Privacy Conformity Ratings
Presentation by Ankush Johar - ITU 2017 Dubai 1 2
Here’s one answer...

8. PPM BY 1 2 3 Personal Data Gateway User Assist Function
Privacy Policy Manager Model Demonstrated by KDDI at MWC 2017
Users can control access to their personal data being held.
Users can set their own privacy preference & visibility of transactions
Getting consents from users on behalf of service providers
Personal Data
Gateway
User Assist
Function
Service provider
assist Functions 1 2 3

9. AJ @ WIRELESFEDERATION.COM
ITU DUBAI
MARCH 2017
THANKS
ANKUSH JOHAR
WIRELESFEDERATION.COM