martin lee - first - improving security together€¦ · © 2014 cisco and/or its affiliates. all...

Cisco 1 © 2014 Cisco and/or its affiliates. All rights reserved.

Martin Lee Technical Lead, Cisco

02/4/2014


Source: http://en.wikipedia.org/wiki/Moore%27s_law


Osborne Executive

1982 – $2495

iPhone

2007 - $499

Source: http://web.mit.edu/newsoffice/2013/how-to-predict-the-progress-of-technology-0306.html


Source: http://www.singularity.com/charts/page62.html

P III - $496 1999

P III - $12 2014


Source:Byte magazine, July 1980, Amazon 2014


Source: M.Komorowski http://www.mkomo.com/cost-per-gigabyte


Source: Ovum

Cost: US$/Gb/sec/Km

1994 ~$2000

2014 < $1


SENSOR

ACTUATOR

CONTROL SYSTEM

DATA

Control unit

Wireless communication

Operations Centre

Readings

Instructions


CONTROL SYSTEM

DATA

Operations Centre

Accident

Dispatch Help

Accelerometer


CONTROL SYSTEM

DATA

Air temperature

Air humidity

Leaf wetness

Soil moisture

Soil temperature

Solar radiation

Operations Centre

Spray

Harvest

Irrigate

http://newsroom.cisco.com/video-content?type=webcontent&articleId=1275685

Vines

Sensors

(30 000)


CONTROL SYSTEM

DATA

Pulse

Breathing rate

Oxygen saturation

Movement

Operations Centre

http://www.oxehealth.com Philips VitalSigns camera

Patient Phone Camera Intervene


CONTROL SYSTEM

DATA

Usage

Operations Centre

Source: http://www.energymanagertoday.com/atms-vending-machines-waste-loads-of-energy-097280

ATMs (58 000)

Usage: 8.4 min/hr

50% can power down

$19 M/yr saving


Tom Noonan, Cisco

Source: http://gigaom.com/2013/12/01/the-big-energy-problem-that-happens-while-youre-sleeping/


Source: http://www.bbc.co.uk/news/business-15352599


Source: https://www.gov.uk/government/policies/reducing-the-uk-s-greenhouse-gas-emissions-by-80-by-2050/supporting-pages/carbon-budgets


CONTROL SYSTEM

DATA

Time / Date

Ingress / Egress

External temperature

Room temperature

Weather forecast

Water usage

Power usage / device

Lift utilisation

Signs of wear in lift

Operations Centre

Smart Building


CONTROL SYSTEM

DATA

Heat where needed

Light where needed

Power down devices

Power down coffee machine

Switch off water pump

One operational lift

Call for service

Operations Centre

Smart Building


Source: Hugh Boyes, IET

Integration with wider environment.

Smart grid

Public transport


SENSOR

ACTUATOR

CONTROL SYSTEM

DATA

Operations Centre

Activate cooling

High temperature


SENSOR

ACTUATOR

CONTROL SYSTEM

DATA

Operations Centre

X

X Block Readings


SENSOR

ACTUATOR

CONTROL SYSTEM

DATA

Operations Centre

X

X Intercept Readings

Fake Reading

Fake Instruction


Source: http://www.jpost.com/Enviro-Tech/Technion-students-find-way-to-hack-Waze-create-fake-traffic-jams-346377


SENSOR

ACTUATOR

Fake Reading FAKE SENSOR

FAKE ACTUATOR

Fake Operations Centre

Fake Instruction


SENSOR

ACTUATOR

CONTROL SYSTEM

DATA

Operations Centre

Hack

Hack

Hack


Source:http://www.cctvblog.com/2014/04/03/hikvision-bad-end-bitcoin-hijacking-using-security-dvrs/


SENSOR

ACTUATOR

CONTROL SYSTEM

DATA

Authenticate Access Harden & Monitor

Operations Centre

Authenticate Devices

Authenticate Origin

Encrypt Data

Multiple Routes

Patch


Source: http://news.cnet.com/8301-1009_3-57599646-83/cybercrooks-use-ddos-attacks-to-mask-theft-of-banks-millions/


Source: http://www.bbc.co.uk/news/technology-21784005

http://en.community.dell.com/cfs-file.ashx/__key/telligent-evolution-components-attachments/13-4491-00-00-20-10-90-89/Facility-Cooling-Failure-Ride-Through-whitepaper.pdf


Source: https://blogs.cisco.com/security/the-internet-of-everything-including-malware/


Source: http://www.wired.com/threatlevel/2013/05/googles-control-system-hacked/


Source: http://www.wired.com/threatlevel/2013/08/computer-prison-door-mishap/


UK Cyber Standards Report

Source: https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/261681/bis-13-1294-uk-cyber-security-standards-research-report.pdf#!

InfoSec Standards Safety Standards

ISO 2700x IEC 62443

IEC 61508

PAS 555


Low cost sensors + ubiquitous bandwidth + cheap data processing means -

The Internet of Things is Happening.

Lowering energy costs & reducing wastage means -

Smart Buildings Are Profitable Buildings.

If we have learnt anything over the past 15 years –

Poorly Secured Systems Will Be Compromised.


Do you have devices / people in smart buildings?

Model Your Risk.

Does your building management know the risk?

Ask Questions, Specify Requirements.

If we have learnt anything over the past 15 years –

Test, Test & Test Again!


Learn more:

http://www.theiet.org/sectors/information-communications/intelligent-buildings.cfm

http://internetofeverything.cisco.com/

Thank you.

Martin Lee

[email protected]

martin lee - first - improving security together€¦ · © 2014 cisco and/or its affiliates. all...

Documents