June 2019 - iot-wg - mailman.ripe.net

For information: ETSI releases IoT security standard
by Marco Hogewoning 17 Oct '19

17 Oct '19

Dear colleagues, The European Telecommunications Standardisation Institute (ETSI), earlier this week released their initial standard for securing IoT devices. The document is titled ‘Technical specification - Cyber Security for Consumer Internet of Things’ (ETSI TS 103 645), and states that its objective is, “...to support all parties involved in the development and manufacturing of consumer IoT with guidance on securing their products.” While it remains a very high-level document, containing many recommendations our community probably takes for granted, it could be helpful in guiding newcomers towards a more secure implementation of their IoT services and devices. The recommendations include items like, for instance, using non-default passwords. Although this is not yet a European Standard (EN) level specification, it is likely that any European standard specification in this area would be developed based on guidance from this document. In this context, a specification like this might also be reflected in product conformity guidelines such as the Radio Equipment Directive, that I posted about last week. The specification is available at https://www.etsi.org/deliver/etsi_ts/103600_103699/103645/01.01.01_60/ts_10… Regards, Marco Hogewoning RIPE NCC

4 4

InnoITeam - a new Center of Excellence in IoT Science and Technology
by Artūras Serackis 30 Jun '19

30 Jun '19

Dear Colleagues, We are excited to introduce you a new initiative a Center of Excellence in IoT Science and Technology (InnoITeam). The CoE will leverage the knowledge, experience, and resources of three Lithuanian institutions – Kaunas University of Technology, Vilnius Gediminas Technical University and State Enterprise Centre of Registers of Lithuania - with the support of two advanced EU partners from Sweden – Linköping University and Interactive Institute Swedish ICT in Norrköping. During the first five years, the Consortium will focus on four R&D topics: 1. User interfacing and interaction design approaches for Smart Environments based on IoT. 2. Cybersecurity aspects of the Smart Environments based on IoT. 3. Data analysis and visualization approaches for data-intensive IoT environments. 4. Cognitive IoT technologies for Smart Home Environments. The InnoITeam project is funded by the European Union’s Horizon 2020 research and innovation programme and coordinated by the Kaunas University of Technology. The project has been already started in September (2017) and is finishing its first phase. During the second phase in a five-year period, the InnoITeam is planning to become a self-sustaining organization, integrating and supporting research excellence and innovation development in Lithuania, the Baltic Sea region, and Europe. Meet our team and recent news on our web page: https://www.innoiteam.com Follow us on social media: https://facebook.com/innoiteam https://www.linkedin.com/company/innoiteam/ https://twitter.com/innoiteam

8 9

RIOT Summit: Call for Contributions
by Matthias Waehlisch 22 Jun '19

22 Jun '19

Hi, those who don't know: RIOT is a modern open source operating system for low-end IoT devices, https://riot-os.org/. Initially developed by folks from academia, the RIOT community now consists of companies, makers, and hobbyist, distributed all around the world. The RIOT community meets annually f2f at the RIOT Summit, which will be held this year at the Aalto Design Factory, Helsinki, Finland from September 5-6, 2019. The RIOT Summit aims for bringing together RIOTers, beginners and experts, as well as people interested in the IoT in general and decision makers who plan to deploy RIOT in the future. The event combines plenary talks, hands-on tutorials, and demos. All details are available at https://summit.riot-os.org/2019/. The organizers of the RIOT Summit call for any contribution that relates to RIOT and the Internet of Things. If you want to present a talk, please consider the Call for Contributions: * https://summit.riot-os.org/2019/call-for-contributions The following companies generously support the RIOT Summit 2019: Cisco, Ericsson, wolfSSL, Zühlke. In case of case questions, you can contact me diretly or send an email to summit(a)riot-os.org. Thanks matthias -- Matthias Waehlisch . Freie Universitaet Berlin, Computer Science .. http://www.cs.fu-berlin.de/~waehl

1 0

Re: [iot-wg] The DNS and the Internet of Things: Opportunities, Risks, and Challenges
by sandoche Balakrichenan 07 Jun '19

07 Jun '19

On 07/06/2019 15:52, Eliot Lear wrote: > > > >> ==> Is this a topic that our group can focus on and maybe prepare a >> RIPE BCP (Best Current Practice) or BCOP (Best Current Operation >> Practice) document like the document prepared by ICANN SSAC for the >> RIPE community? >> > > I think there is room for at least documenting the issues.Â Where that > happens to me is less important than that it happens ;-) > > > ==> I know that you have been involved in a similar effort on IoT device onboarding : https://github.com/iot-onboarding/catalog Maybe we could start something similar in github or a similar place where everyone can contribute. Just want to know the views of others in the group, if any. Sandoche.

1 0

Re: [iot-wg] The DNS and the Internet of Things: Opportunities, Risks, and Challenges
by sandoche Balakrichenan 07 Jun '19

07 Jun '19

Hi Eliot, Thanks for the response. My comments inline: On 07/06/2019 09:29, Eliot Lear wrote: > > Hi Ad & Sandoche, > > Good that SSAC has published something.Â There really are some big > challenges here for IoT.Â In the area of DNS, one challenge is that > in order to limit attacks, you really do want the network to limit > access to services, and that means knowing which domains the device > should be speaking to. > The SPIN project from SIDN (https://www.sidnlabs.nl/en/news-and-blogs/redesigning-spin-to-a-reference-p…), seems to be a possible solution. Also, there is another plugin from Princeton that lets one to inspect IoT traffic in your home network right from the browser: https://iot-inspector.princeton.edu/blog/post/getting-started/ https://iot-inspector.princeton.edu/blog/ > Â That creates some challenges.Â That means some sort of consistency > with regard to DNS query responses to the device and to the > enforcement point.Â The ultimate approach to that is coordination > between the resolver and the enforcement point, but snooping has > worked in the past.Â And so you can see some DoH challenges if IoT > devices implement that capability prematurely. > > ==> Is this a topic that our group can focus on and maybe prepare a RIPE BCP (Best Current Practice) or BCOP (Best Current Operation Practice) document like the document prepared by ICANN SSAC for the RIPE community? Please send your views. Sandoche.

1 0

The DNS and the Internet of Things: Opportunities, Risks, and Challenges
by Ad Bresser 05 Jun '19

05 Jun '19

Hi, For the ones that are interested. The ICANN SSAC (Security and Stability Advisory Committee), published: SAC105 The DNS and the Internet of Things: Opportunities, Risks, and Challenges https://www.icann.org/en/system/files/files/sac-105-en.pdf Kind regards, Ad Bresser

2 1