IoT: Security & Privacy at IGNITE 2015

Security and PrivacyOvercoming concerns to unlock potential

Nimbus Ninety IGNITE Seminar November 2015

Joshua Cooper Hildebrand Technology Limited jcooper@hildebrand.co.uk @HildebrandTech #IoT

Let’s talk Privacy then Security

IoT is not quite the Internet

not quite Things

Sweeping Statement No. 1

Light Quality

Air Temp

Occupancy

Appliance Function

sense actuate

intelligence

IoT Promise

not a commodity and

refined petrol is value

“IoT Big Data Oil”

Streamed power reads Bill estimation and forecast

Prepaid (and remaining) balance Consumption graphs (day/wk/mth/yr)

Comparisons CO2

Appliance monitoring and control Weather

Messages Feedback Form [Competitions]

Smart Meter Application

The Solution

Family

Social services

Collect Process Notify

Sensors and hub

Web, mobile and API

Knowledge base

Statistics Events Patterns Exceptions Alerts

Electricity

Visits and deliveries

Checklist

Care network

Occupational

Physiotherapy

Geriatrics

Elderly person

Web, mobile and API

Howz platform combines machine, human observation and expert knowledge

The Platform

Shopping Basket

Where do people go? What do they do?

How long do they stay?

Cameras and door counters lack actionable information

We use “big data” and “machine learning” to understand movement,

predict use and discover opportunities

Our People in Places (PIPTM) technology operates in real-time using advanced spatio-temporal statistical analysis

I work here I eat

I like books

My local

cinema

I meet friends

I am in and out

people, places goods and resources

(not really about the devices)

“Things”

Google cars Artificial intelligence

(cyber physical systems) = liability

“What about …”

GDPR General Data Protection Regulation

(harmonised EU Data Protection)

Sweeping Change

Lack of control and information asymmetry

Privacy Challenge 1

Quality of user’s consent

Privacy Challenge 2

Inference and repurposing of original data

Privacy Challenge 3

Intrusive identification of behaviour patterns and

profiling

Privacy Challenge 4

Limitation on possibility of remaining anonymous

Privacy Challenge 5

Security is the unplanned risk

Privacy Challenge 6

Fines 2%-5% of global

turnover*

“Why do I care …”

Goal posts are moving 2017 - 2019

“When do I care …”

ISO27001 Integration of Security and

Privacy

Strategies for Success

Data Protection Officer

Strategy 1

Privacy Impact Assessment

Strategy 2

Privacy by Design

Strategy 3

Put the Data Subject first

Strategy 4

Include Privacy and Security in New Product

Development

Strategy 5

Actuators are the most interesting, but present

different challenges

Sweeping Statement No. 4

Joshua Cooper Hildebrand Technology Limited jcooper@hildebrand.co.uk

@HildebrandTech #IoT

IoT: Security & Privacy at IGNITE 2015

Data & Analytics

A survey in privacy and security in Internet of Things IOT

Internet of things ( IoT) security and privacy issues

the usable security & privacy group · the usable security & privacy group. overview • framing privacy and security decisions • privacy and IoT • privacy on mobile devices

Tackling Data Security and Privacy Challenges of the IoT

TACKLING IOT DATA PRIVACY FOR MANUFACTURING SECTOR...TACKLING IOT DATA PRIVACY FOR MANUFACTURING SECTOR Abstract Adoption of digital technologies has gained momentum in manufacturing

Internet of Things (IoT) - Chapters Site · and privacy? Security and privacy risk management Sample Audit Considerations • Are there formalized security and privacy IoT requirements?

GSMA’s IoT Privacy by Design Decision Tree...of service/product CONSUMER TRUST IN THE IOT SERVICE IF IT MEETS: (I) PRIVACY & DATA PROTECTION OBLIGATIONS (II) CONSUMER PRIVACY RIGHTS

TIG Privacy Ignite

Ignite 2015 - IoT Security and Privacy

What hope for privacy in an IoT world?

Security and privacy threats for smart-home IoT devicesInside job: Security and privacy threats for smart-home IoT devices Authored by Professor Vijay Sivaraman, Dr Hassan Habibi Gharakheili

Consumers Perceptions of IoT Privacy and Security

Everything IoT 2015 Keynote Speaker Kate Carruthers: "IoT security & privacy - the nightmare and the dream"

IoT: legal issues in relation to privacy and security

Addressing Security and Privacy Issues of IoT using

IoT Privacy and Security Challenges for Smart Home

NICS Lab. Publications: Digital Witness and Privacy in IoT

IoT Connected World Security and Privacy · IoT security and privacy as a spectrum of device vulnerability. The spectrum ... Number of connected devices worldwide (in il lion Introduction

Enhancing Privacy in IoT Devices - wiki.aalto.fi

Providing Privacy, Safety, and Security in IoT-Based ... · Title: Providing Privacy, Safety, and Security in IoT-Based Transactive Energy Systems using Distributed Ledgers Keywords: