IT-Security Challenges in the Internet of Things. Christian Graffer Product Manager Endian

Transcription

1 IT-Security Challenges in the Internet of Things Christian Graffer Product Manager Endian

2 Who is Endian? Founded in 2003 at Bolzano, Italy, by a team of experienced network specialists and Linux enthusiasts Endian s goal and path of development are immediately clear: creating sophisticated UTM solutions, totally based on open source technology Dating back to the first release of the Enterprise version, more than 4000 companies, based on 50 countries, have chosen Endian UTM Endian US - Houston Endian Germany - Munich Endian - Bolzano e Milano Endian - Turkey Endian Japan - Tokyo In 2011 Endian approached IoT creating a dedicated solution set

3 Internet of Things (IoT), numbers and trends Billion $4 Trillion 25+ Million 25+ Billion 50 Trillion Connected People Revenue Opportunity Apps Embedded and Intelligent Systems GBs of Data

4 Evolution: Exponential growth of M2M Devices 40, , , ,0000 0, PCs/Laptops/Mobile Handsets M2M (Machine to Machine) Expected growth in the number of connected devices (in billions) Source: Machina Research (2013)

5 Internet of Things, where? This list is far from complete but shows some areas in which Smart Home devices are beings used. Smart Home Door locks that can be opened from your smartphone are becoming more popular thanks to airbnb and similar portals. Physical presence is not required anymore to hand out the keys but is it secure? Many different companies are providing constantly connected light bulbs. Among the vendors you can find big companies such as Philips and Samsung. Smart thermostats are used to control the temperature at home from remote. The most popular of them being Nest even to a point to be bought by Google in 2014.

6 Internet of Things, where? Cars In the automotive market every single vendor already is providing connectivity in some way. In some cases a smartphone is required to open the connection, in others the SIM card is directly integrated into the car. A few problems are: In many cases the infotainment system of the car is connected to the same bus as the engine control and other critical systems. Firmware updates might be used to break into the system. Almost every vendor has had security issues with their software. The range varies between doors that can be opened easily and complete control over the car while it is driving.

7 Internet of Things, where? Hospitals Modern devices in hospitals are also connected to the network. While they are almost impossible to recognize in the end all of the scanners are just regular computers with special extensions to perform their work. In many cases the devices are being shipped once and then not updated anymore, at least not from a security perspective. Many of the systems are outdated and contain serious vulnerabilities. Some systems are even based on software that has reached its end of life and is therefore not being maintained anymore, e.g. Windows XP.

8 Internet of Things, where? Production Plants In the industrial world everything is being connected right now. This process is known under a variety of names in the world: Industry 4.0, Industrial IoT, Machine-to-Machine or simply M2M. Unlike in the IT world the lifetime of production plants and other industrial sites can be as long as 50 years which causes problems now. Old sites have never been planned with IT-security in mind as they were not supposed to be connected. Nevertheless this is now happening. Old and unsupported systems are vulnerable and some of them even reachable from the outside. Just like in hospitals in many cases even Windows XP is used. On production plant consists of many different devices from different vendors. The lack of network segmentation leads to a single insecure device that can compromise all the others.

9 Traditionally, manufacturing has always performed in closed networks. Why do we need to open them today? Allow remote management (intervention/recovery) and monitoring Allow coworkers remote access Allow M2M Communication TCP/IP is a more efficient and versatile transport protocol

10 Internet of Things what are the problems? Previously not existing connection needs to be secured without changing the infrastructure Connecting users need to be authenticated Connecting users need to be authorized Devices of different vendors are in the same network All vendors want to use their own tools Old and unsupported systems are being used Networks all over the world are using the same IP address pool Multiple concurrent connections to one device might result in fatal incidents

11 Internet of Things if problems are not addressed

12 Internet of Things if problems are not addressed

13 Internet of Things if problems are not addressed

14 Internet of Things layers of protection (1) Secure Connections: Only connections over encrypted tunnels are allowed (2) Access Restriction: Just pre -approved connections can be established (3) Service/Port Restriction: By deciding which port has to be blocked you guarantee another layer of protection from malwares and threats (4) Protection from various attacks: Intercept attacks and protect against service interruption such as denial of service attacks, port scans, malformed packets (5) Intrusion Detection Alerts: Monitor the network and systems to alert you in the event of malicious activities or policy violations (6) Application Level Filtering: Protocols are recognized and filtered by the 4i Edge appliance

15 Solution: role-based access to endpoints and applications

16 Use case Estimated yearly roll out: 2000 Endian 4i 515 systems Simple, stable and bidirectional VPN (for daily logs exchange) Switchboard integration with customer support portal Extremely granular management of access permissions (single users or groups) Automatic remapping to resolve IP overlapping 3G or WiFi connection to in-field devices Instrumentation Laboratory (IL), a Spanish company belonging to the Werfen Group, is a global giant of the production and distribution of systems for clinical analysis (critical care, homeostasis, clinical chemistry and autoimmunity).the group has branches all over the world, more than 4000 employees and grosses over than one billion dollars.

17 Use case Optimizing remote maintenance for customers all over the world through Endian Switchboard Managing different network infrastructures and strict security policies Securing connection between service personnel and customer plants VPN tunnel always enabled End user connection to Endian Switchboard through Connect App Integrating with any device that utilizes Open VPN (SSL) technology. Caterpillar is not only one of the world s leading manufacturers of construction machinery but is also an acknowledged supplier of technically innovative user-oriented products and services in numerous other fields. The company has grown into a group with approximately 114,000 employees across all continents.

18 Endian - Securing everything Thank you