GSMA Mobile 360 Series - IoT Security: Safeguarding the Network

Transcript

1. Gianluca Varisco, CISO Arduino GSMA Mobile 360 Series, 29/05/2019 IoT Security: Safeguarding the Network @gvarisco
2. Developing secure and reliable IoT applications can be hard
3. Hardware Nodes (Devices, Sensors) Constrained devices Require C/C++ firmware skills Effective Power Management depends on Firmware Gateways Remote connections, SSH Device management Radio / Networks Long range / Low Power Source: https://makezine.com/2017/06/27/state-boards- platforms-products-purposes-current-crop-microcontrollers- vies-attention/
4. Cloud Software Many different languages, protocols, libraries, security standards, etc.
5. Data & persistence Different data formats make data manipulation and interpretation difficult
6. 6 The IoT Landscape is quite fragmented
7. “Enable anyone to develop secure IoT applications by making complex technology simple to use” ARDUINO MISSION for IoT
8. 8 The “PANINI” Concept:
10. 10 WHAT ARDUINO PROVIDES Sensors Data + Device Interaction Automatic Code Generation Arduino Hardware Secure Cloud Connection Device Management OTA Updates Firmware Changes Business Logic Firmware Upload Certificate or Password Provisioning Dashboards Third Parties IoT SaaS Arduino IoT Cloud
11. 11 Security Secure in every layer Hardware Software Data
12. 12 Core to the future and success of IoT is the “security of things” Device Identity Anti-tampering Key Management Encrypted Transport and Data Confidentiality
13. 13 SECURE ELEMENT
14. 14 Hardware Security ATECC508A/ATECC608A Cryptographic Co-Processor from Microchip Technology What we use it for? – Secure Hardware-Based Key Storage up to 16 keys, certificates or data – Hardware Support for Asymmetric Sign, Verify, Key Agreement ECDSA, ECDH, NIST P256 Elliptic Curve Support – Internal high-quality FIPS Random Number Generator (RNG)
15. 15 Data encryption and secure authentication – All traffic to/from Arduino IoT Cloud is encrypted using Transport Layer Security (TLS) – Device authentication using X.509 certificates – Initial support for JSON Web Tokens (ECDSA P-256 SHA-256) in ArduinoECCX08 library – AES-128 (for LoRaWAN™), AES-CMAC for messages exchange, which includes encryption and integrity.
16. 16 SECURITY RECAP – Hardware-based security – Devices’ provisioning – TLS certificates for authentication – Encrypted data transfer
17. 17 https://www.arduino.cc/sim
18. THAT’S A WRAP, THANK YOU! Gianluca Varisco <g.varisco@arduino.cc> @gvarisco