the internet of stupid things - sidn€¦ · mirai vs. just let the market fix it! but will it?...
TRANSCRIPT
![Page 1: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/1.jpg)
The Internet of Stupid Things
Jelte Jansen | ECP Jaarcongres
16 november 2017
![Page 2: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/2.jpg)
![Page 3: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/3.jpg)
Smart Devices“A smart device is an electronic device, [snip],that can operate to some extent interactivelyand autonomously.”
Source: Wikipedia
![Page 4: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/4.jpg)
![Page 5: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/5.jpg)
![Page 6: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/6.jpg)
![Page 7: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/7.jpg)
![Page 8: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/8.jpg)
Measures: * How long it took to eat your meal.* The amount of "fork servings" taken per minute.* Intervals between "fork servings".
This information is then uploaded via USB or Bluetooth to your Online Dashboard
![Page 9: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/9.jpg)
![Page 10: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/10.jpg)
![Page 11: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/11.jpg)
With “Waistline Trend Analysis”!
![Page 12: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/12.jpg)
![Page 13: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/13.jpg)
Absolutely! All data will be kept anonymous but users will have the option to share their recent data with friends, or, indeed the world. You will be able to anonymously access stats that you can compare with i.Con users worldwide.
What does i.Con do with its data? Can I use it anonymously?
![Page 14: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/14.jpg)
![Page 15: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/15.jpg)
![Page 16: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/16.jpg)
![Page 17: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/17.jpg)
![Page 18: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/18.jpg)
![Page 19: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/19.jpg)
![Page 20: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/20.jpg)
8.4 BillionDevices connected to the Internet in 2017
Source: Gartner (January 2017)
![Page 21: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/21.jpg)
20 Billionin 2020
![Page 22: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/22.jpg)
So, about that IoT
![Page 23: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/23.jpg)
What is the IoT?
Wikipedia definition:
“The Internet of things (IoT) is the inter-networking of physical devices, vehicles (also referred to as "connected devices" and "smart devices"), buildings, and other items embedded with electronics, software, sensors, actuators, and network connectivity which enable these objects to collect and exchange data.”
![Page 24: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/24.jpg)
What is the IoT?
Global Standards Initiative definition:
“a global infrastructure for the information society, enabling advanced services by interconnecting (physical and virtual) things based on existing and evolving interoperable information and communication technologies"[3] and for these purposes a "thing" is "an object of the physical world (physical things) or the information world (virtual things), which is capable of being identified and integrated into communication networks".”
![Page 25: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/25.jpg)
What is the IoT?
• IEEE published a document: “Towards a definition of the IoT”
• Only 86 pages!
![Page 26: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/26.jpg)
What is the IoT?
A simpler definition:
“Stuff that did not use to be networked”
![Page 27: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/27.jpg)
What is the IoT?
An even simpler definition:
“One big mess”
![Page 28: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/28.jpg)
So, about that IoT
![Page 29: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/29.jpg)
Attributed to @tkadlec
![Page 30: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/30.jpg)
The S in IoT
• Devices with security holes• Devices are not updated• Devices have no, or bad passwords• Devices don’t encrypt data• Devices leak sensitive data such as wifi passwords• The list goes on and on
![Page 31: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/31.jpg)
Why is that?
• Security is hard• Security is expensive• In some cases: security is not ‘userfriendly’• Security is not a feature that sells devices
Time to market and price are
• Security is invisible
![Page 32: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/32.jpg)
The effects of lack of security
![Page 33: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/33.jpg)
The 2016 Dyn attack
1.2 TbpsFrom ‘only’ 100.000 devices
vs.Mirai
![Page 34: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/34.jpg)
Just let the market fix it!
![Page 35: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/35.jpg)
But will it?
"The market can't fix this because neither the buyer nor the seller cares.
The owners of the webcams and DVRs used in the denial-of-service attacks don't care.
Their devices were cheap to buy, they still work, and they don't know any of the victims
of the attacks.
The sellers of those devices don't care: They're now selling newer and
better models, and the original buyers only cared about price and
features.
There is no market solution, because the insecurity is what economists
call an externality: It's an effect of the purchasing decision that
affects other people. Think of it kind of like invisible pollution."
https://www.schneier.com/blog/archives/2017/02/security_and_th.html
![Page 36: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/36.jpg)
Some users may care a bit
![Page 37: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/37.jpg)
Some users may care a bit
![Page 38: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/38.jpg)
Some users may care a bit
![Page 39: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/39.jpg)
What should we do?
• Better practices for manufacturers?• Free secure software stacks?• International policy, regulation, certificiation?• Clear up accountability issues?• Generate market demand for secure products?• Quarantine bad actors (e.g. at ISP)?• Educate users?• Empower users?
“Yes”We need to do it all
![Page 40: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/40.jpg)
Protect home networks
Focus on one today:
![Page 41: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/41.jpg)
How to protect home networks?
• Home networks notoriously insecure• Many different devices and device types• There will always be bad devices and computers
![Page 42: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/42.jpg)
Quarantined by ISP
• “Reinstall Windows”
• 15-20 devices connected at any time
• None of them run windows.
![Page 43: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/43.jpg)
How to protect home networks?
• Lowest common denominator: IP• So, firewall?• We need something better
![Page 44: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/44.jpg)
The Dream
Open home security platform: open source, open standards
Automatic operation: guards and automatically blocks devices
Privacy friendly: runs locally, does not process application-level data
User-centric: automatic, but allow for ‘power-use’
Enables new business models: network-level system w/ well-defined APIs
![Page 45: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/45.jpg)
The SPIN project at SIDN Labs
• Security and Privacy for In-home Networks
• Research and prototype SPIN functions:• Visualise network traffic• Automatically block unwanted traffic/infected devices• Allow ‘good’ traffic• Scan devices• Sharing platform for device info
![Page 46: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/46.jpg)
The SPIN project at SIDN Labs
• Open source in-home router/AP software that• Helps end-users control their security and privacy in the IoT• Helps protecting DNS operators (like SIDN!) and other service
provides from IoT-powered DDoS attacks• All processing done locally, no VPN, no enforced cloud
![Page 47: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/47.jpg)
High-level view
TrafficCapturer
DeviceScanner
TrafficFilter
ThreatDetector
FilteringDP
Applica ons(BlockingNo fier,TopologyBrowser,SharingApplica on)
PCAP
TopologyDatabase
eventPa ern
DatabasePolicy
Database
SPINService
OtherSPINSystem
D1àT
D1ßA
T
A
PacketForwarder
Communityofsecurity
researchers topologychanges(SPINprotocol)
SPINpolicycommunity
edit
importimport
update
update
Filteringdecision
configu re
genericdeviceinfo
Incomingtraffic
Outgoingtraffic
D1
browse,export
D1ßA
D1àT
Control Packetforwardingpath
3.1 3.23.2
3.5 3.5
3.3
3.4
topologychanges
no fica onsmanualoverride
![Page 48: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/48.jpg)
Demo!
![Page 49: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/49.jpg)
Status
• Running prototype• ‘Vertical slice’ of the concept• Visualises basic traffic• Blocks specified traffic
• Running prototype• ‘Vertical slice’ of the concept• Visualises basic traffic• Blocks specified traffic
• Open source: https://github.com/SIDN/SPIN
• Full (GL-Inet) images at https://valibox.sidnlabs.nl
![Page 50: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/50.jpg)
Current high-level topics of interest
• Standardization• Pilot for large scale evaluation• Business models based on SPIN platform• SPIN as a platform for IoT research projects
![Page 51: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/51.jpg)
Deployment
• We cannot do this alone!
• Get it into deployed devices?
• Maybe even standard home routers at ISPs?
• Free software, go get it ;)
![Page 52: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/52.jpg)
Visualiser
![Page 53: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/53.jpg)
Visualiser
![Page 54: The Internet of Stupid Things - SIDN€¦ · Mirai vs. Just let the market fix it! But will it? "The market can't fix this because neither the buyer nor the seller cares. The owners](https://reader034.vdocuments.net/reader034/viewer/2022050606/5fad8750ed6a4240781954e4/html5/thumbnails/54.jpg)
Questions/ideas/suggestions?