of a Water Treatment Facility by a Foreign Hacker* *NSTAC Report to the President on the Internet of Things. www.dhs.gov/sites/default/files/publications/
Threat & Vulnerability Mitigation • Monitoring and Alerting • Software/Firmware Auto-Updates • Privacy Models Mission of IT Design and maintain software, hardware and network resources which run securely and provide privacy Information Technology (IT) the application of computers and telecommunications equipment to store, retrieve, transmit and manipulate data* *en.wikipedia.org/wiki/Information_technology
monitoring and control • Isolate and control – cut off all interaction with the world • Design to protect against natural and man-made disasters Mission of OT Design and maintain machines which run reliably, and safely (do not cause injury or harm to other machines, humans, and the environment) Operations Technology (OT) collects information and causes changes in the physical world through the direct monitoring and control of physical devices in industrial contexts
to move ‘Trusted’ pillar in the place of connected and connected moves to the bottom. Slide 10 should become the next slide and should have a similar design as this slide with IoT Core. PRODUCTIVE Commercial OS platform that brings modern user experience to your things TRUSTED Trusted platform for cloud- connected devices CONNECTED Open platform that easily connects things, endpoints, and the cloud
in the world Centers of excellence Operational Security Assurance (OSA) process Security Development Lifecycle (SDL) azure.microsoft.com/documentation/articles/securing-iot-ground-up/
. Over a secure internet connection . . . To Microsoft Azure – built with security from the ground up ----1010101101010101010110101110100100100010111----˃ ˂---1010101101010101010110101110100100100010111---- Device Security Connection Security Cloud Security
help mitigate the risk of one component of the defense being compromised or circumvented* *en.wikipedia.org/wiki/Defence_in_depth#Information_security Each role is responsible for a layer of depth, and each layer has further layers of safeguards so as to build defense in depth
Process Data Store ? Data Flow The STRIDE model Spoofing Identity Tampering with Data Repudiation Information Disclosure Denial of Service Elevation of Privilege User Device Field Gateway Cloud Gateway Front End Services Backend Services Identity System User Data Federation Partners Local User Zone Local Zone Device Zone Field Gateway Zone Cloud Gateway Zone Trust Boundary Azure Services Zone Remote User Zone Gateway Zone Services Zone
up • Gartner Predicts 2016: Security and the Internet of Things • https://azure.microsoft.com/en- us/documentation/articles/iot-hub- security-ground-up/ IoT Site Azure.com Site
ess is the creation of new business designs by blurring the digital and physical worlds.” Source: Gartner Building and Expanding a Digital Business Primer, 2016, 29 March 2016, Jorge Lopez Innovating with crowdsourcing and data Adapting the business through intelligent operations Working smarter with smart machines Staying ahead by anticipating what’s next Delighting customers with richer experiences
needed for root-cause analysis Take days or weeks to reroute and reconfigure devices Maintain technicians onsite to determine and resolve issues Complete corrections within hours, including rerouting processes and reconfiguring machines Access devices remotely to diagnose and resolve issues Access comprehensive data almost immediately to perform root-cause analysis Smart factories
Manually track inventory data and separately coordinate with distributors Perform regular inventory to determine what products are selling and need to be reordered Access real-time inventory data on your devices As inventory is removed from store shelf, store info updates in real time Configure the system to notify an employee to restock inventory when below a preconfigured range Smart retail
light requiring individual, manual interaction Static, reactive temperature control system targeting a single temperature setting at all times Siloed passive alarm system Smart home Cloud-connected temperature controls download predictive weather modeling and sense when user is home to apply resources most efficiently Integrated alarm sensors and cameras communicate with one another and to user device 24/7 Sensors monitor user presence and coordinate with connected lighting units for efficiency, etc.
IT top concerns System processes and IT infrastructure efficiencies Reduce IT costs Manage business risks Grow business and revenue opportunities Improve operational efficiencies Gain competitive advantage OT top concerns Benefits of Convergence
Need a proactive IT Strategy for IoT Consistent device management approach Optimize resources and reduce IT costs Train IT workforce to help business make the right IoT investment decisions Make no security comprise with IT & business assets Proliferation of devices at your doorstep Market predicts huge growth for IoT devices at the Enterprises
must understand the tremendous risk associated with IoT-enabled, connected solutions and help their organizations adopt such technologies safely with a comprehensive security strategy. – An S&R Pro's Guide To IoT Security, August 2015, Forrester Research “IoT devices will need to interoperate and communicate, and many IoT business models will rely on sharing data between multiple devices and organizations” - Gartner Press Release, Gartner Identifies the Top 10 Internet of Things Technologies for 2017 and 2018, February 2016 http://www.gartner.com/newsroom/id/3221818 “IoT remains a complex collection of technology and services for enterprises to navigate” - IDC Innovators for the 2016 Internet of Things Platforms Market – Press release, 17 May, 2016
balance between edge computing and cloud computing” - ABI Research Edge Analytics in IoT 2Q2015 Successful IoT solutions demand robust edge computing capabilities
Things Attributes of Smart Things Basic connectivity No/light manageability Basic hardware Resource constrained Basic security/identity Attributes of Basic Things Transmit data Perform instant actions Generate data Role of Basic Things
corporate assets secure? How I am going to manage and deploy these devices? How can I apply IT policies consistency across all our assets? How am I going to train my workforce to tackle these new IoT devices?
Developer Tools & Resources Commercial Ready Interactive & Innovative UX Universal Windows Platform Cortana Natural User Experiences – Touch, Speech, Ink Productive Commercial-ready IoT platform that brings modern user experience to your things
Party MDM SC Config Man OMA DM Purpose built Industry Devices One Windows Platform • Converged MDM Stack • Converged Servicing Stack • Common CSPs Windows 10 IoT
more Device-aware runtime light up One Dev Center Flexible device family targeting Detailed analytic reports Existing code welcome Desktop applications Mobile websites Cross-platform apps (e.g. Unity, Xamarin) Familiar tools, familiar processes Microsoft provides the tooling and services to bring your app to market faster
and health attestation Identity protection and access control Advanced lock-down capabilities Native UEFI Verified OS Loader Kernel Drivers System Drivers 3rd Party Drivers User Login Apps Signature Verification Boot Measurements Access Control Lockdown Code Integrity
Azure Today: AllJoyn in Windows 10 Tomorrow: OCF Bridge and connect other ecosystems Including: Modbus BACNet Zigbee OPC-UA support for industrial scenarios
resiliency Bluetooth improvements—factory pairing, AVRCP browsing New “Anniversary Update” LTSB Version in 2016 New “Anniversary Update” CBB version in 2016 Assigned Access Improvements
Leading user experiences and connectivity to empower business scenarios Windows Store for Business Streamlined manageability Bulk Provisioning Assigned Access improvements
to your things with Windows 10 IoT platform your enterprise assets with Windows IoT similar to your PCs and Phones Untap the power of data with Microsoft IoT technologies while to build your next innovation with Windows 10 IoT
Provisioning API Identity and Registry Stores Stream Processors Analytics & Machine Learning Business Integration Connectors and Gateway(s) Device State Store Gateway Storage Cloud Gateway App Backend Data Path Optional solution component IoT solution component IoT Client Presentation & Business Connectivity Data Processing, Analytics and Management Device Connectivity Personal mobile devices IP capable devices IoT Client Business systems Azure IoT Reference Architecture
messaging Device-to-cloud and Cloud-to-device Durable messages (at least once semantics) Per-device authentication Individual device identities and credentials Multi-protocol support Natively supports AMQP, MQTT, HTTP, AMQP- WS Designed for extensibility to custom protocols Service assisted communications Secure bi-directional communication Command and control Cloud-facing telemetry ingestion Delivery receipts, expired messages Device communication errors Connection multiplexing Single device-cloud connection for all communications (C2D, D2C) Multi-platform Device SDKs available for multiple platforms (e.g. RTOS, Linux, Windows) Multi-platform Service SDK
Any programming model • Packaged as Application • Gets versioning, upgrade, monitoring, health, etc. Reliable Services • Stateless & stateful services • Concurrent, granular state changes • Use of the Reliable Collections • Transactions across collections • Full platform integration • Any communication stack Reliable Actors • Stateless & stateful actor objects • Simplified programming model • Single Threaded model • Great for scaled out compute and state Service Fabric Programming Models
https://azure.microsoft.com/en-us/documentation/articles/iot-security-architecture/ Azure IoT Suite https://www.azureiotsuite.com/ Github: Azure – IoT https://github.com/azure?utf8=%E2%9C%93&query=iot Github: OPC UA .Net Standard Library Stack and Samples https://github.com/OPCFoundation/UA-.NETStandardLibrary
taiponrock
hatappi
euglena1215
masuda220
nttcom
sansan33
wolfgangwagner
takeda_h
recruitengineers
upura
rrreeeyyy
arawn
aleyda
mkilby
codingconduct
reverentgeek
tammyeverts
inesmontani
techseoconnect
tanoku
ammeep
baasie
ryanjones
