September 2014 - DG-IDoT - mailman.kantarainitiative.org

Security flaws in the IOT
by Scott Shorter 29 Sep '14

29 Sep '14

Hi all and happy Monday, I wanted to share some slides that I delivered a couple of months ago on the topic of security vulnerabilities in the IOT. It was a brief and informal presentation, not attempting to be exhaustive, but it does include some recommendations near the end. I would appreciate comments on those recommendation in particular, but would also be glad to hear about other flaws that folks think may be relevant to the topic. Best, Scott -- ============================================================== *Scott Shorter, Principal Security Engineer* Electrosoft *–* Fueling Customer Success Through Outstanding Value and Trust! *Woman-Owned, Minority-Owned Small Business | ISO 9001 | CMMI Level 2 * 1893 Metro Center Drive; Ste 228; Reston, VA 20190 (703) 437-9451 x21 (office); (240) 994-7793 (cell) sshorter(a)electrosoft-inc.com (Email); http://www.electrosoft-inc.com (Web) ==============================================================

1 0

IDoT conf call
by Ingo.Friese＠telekom.de 29 Sep '14

29 Sep '14

**** Due to a national holiday I’d like to postpone our Telco to the 10.10.2014 **** Dear all, I’d like to invite you to our biweekly IDoT call. Date and Time • Date: Friday • Time: 07:00 PT | 10:00 ET | 16:00 CEST * Dial-in Details Skype: +99051000000481 US Dial-In: +1-805-309-2350 Alternate Toll +1 (714) 551-9842 International Numbers: http://kantarainitiative.org/confluence/x/KYC_/ Conference ID: 613-2898 The following commands may be used participants during the conference call:+ *0 Plays menu of Keypad Commands *3 Promote to Host (if non-host) *5 Raise your hand *6 Mute yourself (toggle on/off) *# Private roll call of participants \ Mute music-on-hold (toggle on/off) TurboPhone (beta): https://www.turbobridge.com/join.html Works with Internet Explorer on Windows only SIP Access (using IP phone or soft phone) sip:bridge@turbobridge.com SIP URL details: https://www.turbobridge.com/help/Index.html?context=180

1 0

IDoT telecon 2014-09-26
by Ingo.Friese＠telekom.de 26 Sep '14

26 Sep '14

Dear All, I hope you are all doing well. I'd like to remind you that our next IDoT-call is coming up today. Today I want you to give you an update on: IEEE P2413 IoT architecture meeting IEEE WS / Kantara Harmonization meeting Ross Foard's document /use-case Some interesting links and docs: http://ibm.biz/DeviceDemocracy Some of the Related Press Coverage: http://gigaom.com/2014/09/09/check-out-ibms-proposal-for-an-internet-of-thi… http://venturebeat.com/2014/08/24/the-internet-of-things-will-cost-companie… http://qz.com/269812/five-ways-the-internet-of-things-is-already-broken-and… I'm looking forward to talking to you! Best regards, Ingo Date and Time * Friday, September 26th, at 7am PT (time chart)<http://www.timeanddate.com/worldclock/fixedtime.html?msg=IDoT+Conf+Call&iso…> * Voice: Skype: +99051000000481 or US +1-805-309-2350 / Alternate Toll +1 (714) 551-9842 (international dial-in lines<http://kantarainitiative.org/confluence/x/KYC_/>), room code 613-2898# * (Turbobridge call options<https://www.turbobridge.com/join.html>) Kind regards Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Dipl.-Ing. Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148 (Phone) +49391580216849 (Fax) E-Mail: ingo.friese(a)telekom.de<mailto:ingo.friese@telekom.de> www.telekom.com<http://www.telekom.com/> Life is for sharing. DEUTSCHE TELEKOM AG Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman) Board of Management: René Obermann (Chairman), Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Dr. Thomas Kremer, Claudia Nemat, Prof. Dr. Marion Schick Commercial register: Amtsgericht Bonn HRB 6794 Registered office: Bonn Big changes start small - conserve resources by not printing every e-mail.

1 0

Re: [DG-IDoT] IdoT Security & Privacy Paper
by Colin Wallis 25 Sep '14

25 Sep '14

Ha! yes! I see now. No idea why it has re-surfaced now.. Date: Mon, 8 Sep 2014 22:29:41 +0100 From: simon.moffatt(a)forgerock.com To: colin_wallis(a)hotmail.com; dg-idot(a)kantarainitiative.org Subject: Re: [DG-IDoT] IdoT Security & Privacy Paper Hi Colin Thanks for the reply. This mailing list still active, as this was posted over 3 months ago? Thanks, Simon. Thanks for this Simon It does a fine job of rolling up what is already known, so it depends on what the target audience is... :-) I think some more thought needs to go into the discussion on encryption and authn/authz because I don't think the current standards will scale down enough for small low power devices. The rapidly developing maturity of sensor networks might give a better insight into what can be transferred from the web world into the IdoT world. Thanks for sharing. Cheers Colin Date: Mon, 2 Jun 2014 09:08:00 +0100 From: simon.moffatt(a)forgerock.com To: dg-idot(a)kantarainitiative.org Subject: [DG-IDoT] IdoT Security & Privacy Paper Dear All Here is a paper I put online yesterday focusing on IdoT and the Privacy & Security concerns the identity management component looks to resolve. The paper is quite descriptive, but does outline some key concerns. It's released on Slideshare here - http://www.slideshare.net/simonmoffatt/s-moffatt-identityofthingsjune2014 Regards -- Simon Moffatt CISSP Principal Sales Engineer | EMEA Technical Enablement Tel: +44 7903 347 240 Skype: simon.moffatt _______________________________________________ DG-IDoT mailing list DG-IDoT(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/dg-idot -- Simon Moffatt CISSP Principal Engineer | EMEA Sales Engineering Tel: +44 7903 347 240 Skype: simon.moffatt

3 2

Hypercat
by Ingo.Friese＠telekom.de 20 Sep '14

20 Sep '14

http://www.youtube.com/watch?v=6Ps8iEGRi1U Hypercat has quite similar goals....discovery of Things

2 1

IDoT conf call
by Ingo.Friese＠telekom.de 18 Sep '14

18 Sep '14

Dear all, I’d like to invite you to our biweekly IDoT call. Date and Time • Date: Friday • Time: 07:00 PT | 10:00 ET | 16:00 CEST * Dial-in Details Skype: +99051000000481 US Dial-In: +1-805-309-2350 Alternate Toll +1 (714) 551-9842 International Numbers: http://kantarainitiative.org/confluence/x/KYC_/ Conference ID: 613-2898 The following commands may be used participants during the conference call:+ *0 Plays menu of Keypad Commands *3 Promote to Host (if non-host) *5 Raise your hand *6 Mute yourself (toggle on/off) *# Private roll call of participants \ Mute music-on-hold (toggle on/off) TurboPhone (beta): https://www.turbobridge.com/join.html Works with Internet Explorer on Windows only SIP Access (using IP phone or soft phone) sip:bridge@turbobridge.com SIP URL details: https://www.turbobridge.com/help/Index.html?context=180

1 0

IDoT conf call
by Ingo.Friese＠telekom.de 18 Sep '14

18 Sep '14

Hi All, Hope you all are doing fine. Since I'm traveling tomorrow I'd like to postpone our conf call again. I suggest to have it next week and hope that's ok for you. Sorry! Thanks! Ingo

1 0

oneM2M doc
by Frank.Mildner＠telekom.de 13 Sep '14

13 Sep '14

Dear Scott and all, Enclosed a link to an oneM2M document as discussed in IDoT discussion group today. http://www.onem2m.org/candidate_release/TS-0001-oneM2M-Functional-Architect… Mit freundlichen Grüßen / Viele Grüße / Best Regards Frank Mildner DEUTSCHE TELEKOM AG T-Labs (Research & Innovation) Dipl.-Ing. Frank Mildner Deutsche-Telekom-Allee 7, 64295 Darmstadt +4961515834747 (Tel.) +496151899838 (Fax) E-Mail: frank.mildner(a)telekom.de www.telekom.com<http://www.telekom.com/> Erleben, was verbindet. DEUTSCHE TELEKOM AG Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender) Vorstand: Timotheus Höttges (Vorsitzender), Reinhard Clemens, Niek Jan van Damme, Thomas Dannenfeldt, Dr. Thomas Kremer, Claudia Nemat Handelsregister: Amtsgericht Bonn HRB 6794 Sitz der Gesellschaft: Bonn Grosse Veränderungen fangen klein an - Ressourcen schonen und nicht jede E-Mail drucken.

2 1

Re: [DG-IDoT] IDoT telecon 2014-09-12
by Ingo.Friese＠telekom.de 12 Sep '14

12 Sep '14

Dear All, I hope you are all doing well. I'd like to remind you that our next IDoT-call is coming up today. That's the http://kantarainitiative.org/confluence/download/attachments/64389214/How_t… The slide set I want to introduce / discuss with you. In fact that's the essence of our discussion 2 weeks ago. I'm looking forward to talking to you! Best regards, Ingo Date and Time * Friday, September 12th, at 7am PT (time chart)<http://www.timeanddate.com/worldclock/fixedtime.html?msg=IDoT+Conf+Call&iso…> * Voice: Skype: +99051000000481 or US +1-805-309-2350 / Alternate Toll +1 (714) 551-9842 (international dial-in lines<http://kantarainitiative.org/confluence/x/KYC_/>), room code 613-2898# * (Turbobridge call options<https://www.turbobridge.com/join.html>) Kind regards Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Dipl.-Ing. Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148 (Phone) +49391580216849 (Fax) E-Mail: ingo.friese(a)telekom.de<mailto:ingo.friese@telekom.de> www.telekom.com<http://www.telekom.com/> Life is for sharing. DEUTSCHE TELEKOM AG Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman) Board of Management: René Obermann (Chairman), Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Dr. Thomas Kremer, Claudia Nemat, Prof. Dr. Marion Schick Commercial register: Amtsgericht Bonn HRB 6794 Registered office: Bonn Big changes start small - conserve resources by not printing every e-mail.

1 0

FW: IEEE 2700™-2014 “Standard for Sensor Performance Parameter Definitions,” approved by the IEEE Standards Association Standards Board...
by Colin Wallis 10 Sep '14

10 Sep '14

From: groups-noreply(a)linkedin.com Subject: IEEE 2700™-2014 “Standard for Sensor Performance Parameter Definitions,” approved by the IEEE Standards Association Standards Board... To: colin_wallis(a)hotmail.com Date: Tue, 9 Sep 2014 22:58:57 +0000 Groups Trending discussions in: IEEE-SA Official IEEE Standards Association Group IEEE 2700™-2014 “Standard for Sensor Performance Parameter Definitions,” approved by the IEEE... Martha Tejada View Discussion You are receiving Groups Digest emails. Unsubscribe This email was intended for Colin Wallis (Standards Architect, New Zealand Government (Dept of Internal Affairs)). Learn why we included this. ©2014 LinkedIn Ireland, Gardner House, Wilton Plaza, Wilton Place, Dublin 2, Ireland

2 1

Terminology discussion
by Ingo.Friese＠telekom.de 09 Sep '14

09 Sep '14

Dear All, Jeff started with Sensor, Actuator and Processor. I'd like to extend this model a bit. Because I think the processor could be either near to the actuator (e.g. the processor in a house regulates the heating because of sensor data. This "intelligence" could also be somewhere in the cloud/internet. The processor could be a service on a server somewhere or and app on a smartphone. So I'd like to add an IoT instance in the network. A second point are intermediates or gateways (names are to be discussed). Because many solutions have one or more instances between sensor/actuator an the service in the cloud. Here e.g. several sensors are concentrated. What do you think? Best, Ingo

7 15

IdoT Security & Privacy Paper
by Simon Moffatt 08 Sep '14

08 Sep '14

Dear All Here is a paper I put online yesterday focusing on IdoT and the Privacy & Security concerns the identity management component looks to resolve. The paper is quite descriptive, but does outline some key concerns. It's released on Slideshare here - http://www.slideshare.net/simonmoffatt/s-moffatt-identityofthingsjune2014 Regards -- ForgeRock <http://www.forgerock.com> *Simon Moffatt* CISSP Principal Sales Engineer | EMEA Technical Enablement Tel: +44 7903 347 240 Skype: simon.moffatt

2 1

Just pushed some messages from queue
by Joni Brennan 08 Sep '14

08 Sep '14

Apologies for the many messages - I noticed there were some in the queue that likely should have been sent. Best, Joni Brennan Kantara Initiative | Executive Director voice:+1 732-266-8994 email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Interesting Paper on Identity of Things
by Joni Brennan 08 Sep '14

08 Sep '14

http://www.slideshare.net/simonmoffatt/s-moffatt-identityofthingsjune2014?r… Hello - these groups may find the linked paper of interest. Best Regards, Joni Brennan Kantara Initiative | Executive Director voice:+1 732-266-8994 email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

IDoT conf call
by Ingo.Friese＠telekom.de 03 Sep '14

03 Sep '14

Dear all, I’d like to invite you to our biweekly IDoT call. Date and Time • Date: Friday • Time: 07:00 PT | 10:00 ET | 16:00 CEST * Dial-in Details Skype: +99051000000481 US Dial-In: +1-805-309-2350 Alternate Toll +1 (714) 551-9842 International Numbers: http://kantarainitiative.org/confluence/x/KYC_/ Conference ID: 613-2898 The following commands may be used participants during the conference call:+ *0 Plays menu of Keypad Commands *3 Promote to Host (if non-host) *5 Raise your hand *6 Mute yourself (toggle on/off) *# Private roll call of participants \ Mute music-on-hold (toggle on/off) TurboPhone (beta): https://www.turbobridge.com/join.html Works with Internet Explorer on Windows only SIP Access (using IP phone or soft phone) sip:bridge@turbobridge.com SIP URL details: https://www.turbobridge.com/help/Index.html?context=180

1 0

IDoT conf call 2014-09-05 postponed to 2014-09-12
by Ingo.Friese＠telekom.de 03 Sep '14

03 Sep '14

Dear All, I hope you all are doing fine. This Friday (05.Sep) I'm attending the Kantara Initiative Meeting in Utrecht. So I won't be able to conduct the conf call. On the other hand I'd like to discuss a slide set about our discussion 2 weeks ago. So I'd like to postpone the call to next week (12th Sep 2014). Best regards Ingo

1 0