- iot-wg - mailman.ripe.net

For information: ETSI releases IoT security standard
by Marco Hogewoning 17 Oct '19

17 Oct '19

Dear colleagues, The European Telecommunications Standardisation Institute (ETSI), earlier this week released their initial standard for securing IoT devices. The document is titled ‘Technical specification - Cyber Security for Consumer Internet of Things’ (ETSI TS 103 645), and states that its objective is, “...to support all parties involved in the development and manufacturing of consumer IoT with guidance on securing their products.” While it remains a very high-level document, containing many recommendations our community probably takes for granted, it could be helpful in guiding newcomers towards a more secure implementation of their IoT services and devices. The recommendations include items like, for instance, using non-default passwords. Although this is not yet a European Standard (EN) level specification, it is likely that any European standard specification in this area would be developed based on guidance from this document. In this context, a specification like this might also be reflected in product conformity guidelines such as the Radio Equipment Directive, that I posted about last week. The specification is available at https://www.etsi.org/deliver/etsi_ts/103600_103699/103645/01.01.01_60/ts_10… Regards, Marco Hogewoning RIPE NCC

4 4

[Reminder] Call for applications for the IoT hackathon, 12-13 October, Rotterdam
by sandoche Balakrichenan 06 Oct '19

06 Oct '19

Dear colleagues, As you are aware, RIPE is organising its first IoT hackathon on 12-13 October in Rotterdam, the weekend before RIPE 79. We still have some places and we would be happy if you would like to participate/contribute. There are lots of interesting projects : https://pad.riseup.net/p/IoT-hackathon-keep planned during the Hackathon If you would like to take part in any of the projects mentioned in the etherpad above or propose a new one, please apply before 10/10: https://www.ripe.net/participate/forms/apply/iot-hackathon-rotterdam-2019/ So that the organisers can confirm your participation before the event. You can find more information about the event on RIPE Labs: https://labs.ripe.net/Members/becha/iot-hackathon-at-ripe-79-in-rotterdam Thanks, Sandoche.

1 0

An IoT global warming hackathon in the SEE region, desc0n
by Desiree 25 Sep '19

25 Sep '19

Dear all I’d like to invite anyone interested to attend the 5th annual IoT hackathon, taking place on Oct 5,6 in Belgrade, just 1 week before the RIPE IoT hackathon itself. :) Theme for this year is, if and how can technology help alleviate and address the global warming global challenge. More info about workshops, datathon and hackathon can be found here: https://descon.me Desiree — @desc0n

2 1

RIPE 79 IoT WG Agenda (with description)
by Sandoche Balakrichenan 25 Sep '19

25 Sep '19

Dear all, Here's the agenda for the IoT working group session at RIPE 79 in Rotterdam. For the last two talks, there is no description, since they are self-explanatory. We're meeting on Thursday 17th October from 11:00 to 12:30. ==== 1. Administrivia 5 minutes 2. The security lifecycle of an IoT device by Michael Richardson (Sandelman Software Works) and Eliot Lear (CISCO) 50 minutes *Description :* The RFC8520 Manufacturer Usage Description (MUD) is a tool to describe the limited access that a single function device such as an Internet of Things device might need. The automatic enforcement of access control lists is a serious boon to security of residents and enterprises alike. While enterprises that set up firewalls typically have an idea of how they would respond to an incident,the same is not true for residential situations. The impact of a "Boy who Cries Situation" where an IoT firewall sends inappropriate warnings, the end result is that the firewall is turned off, is a situation worth avoiding through further automation of the security warning process. This talk proposes to standardize a series of processes and protocols for the quarantine and re-storartion of a device. 3. Databox as a Platform for Monitoring IoT Devices at the Edge by Anna Maria Mandalari (Imperial College) 15 minutes *Description : *The Internet of Things (IoT) is now a reality and many challenging issues still need to be addressed. One of this is to guarantee trust, privacy, and security. Privacy has become particularly pertinent after the initiative of the European Commission (EC) about the General Data Protection Regulation (GDPR). Since it has been demonstrated that ensuring privacy relying on the cloud creates risks of privacy violation, we propose to work at the edge. We first build an open access and flexible hardware platform for measurements and custom experimentation on IoT environment. The platform is composed by 87 IoT devices distributed in different locations and backend servers for collecting data. The platform allows to monitor and control the measurement process, and most important ensuring repeatability on the measurements and controlling context information. Through a total of 34,586 rigorous automated and manual controlled experiments, we characterize information exposure in terms of destinations of Internet traffic, whether the contents of communication are protected by encryption, what are the IoT-device interactions that can be inferred from such content, and whether there are unexpected exposures of private and/or sensitive information (e.g., video surreptitiously transmitted by a recording device). We highlight regional differences between these results, potentially due to different privacy regulations in the US and UK. Finally, we develop a Databox app for privacy analysis, a user-side application running locally allowing to monitor the IoT devices, interact with them, understand their operation and look for anomalies. Results will help companies to not accumulate personal data except what they actually require, in order to comply with the GDPR and give control back to the user. 4. Update on the IoT Hackathon Rotterdam 2019 by Constanze Dietrich (Lexta Consultants Group) 15 minutes 5. Best Current Operational Practice (BCOP) document in RIPE scope for proactively mitigating IoT attacks by Jim Reid (RIPE IoT WG Co-chair) If time permits X. AOB ==== -- The RIPE IoT Working Group Chairs Jim and Sandoche

1 0

RIPE 79 IoT working group agenda
by Sandoche Balakrichenan 25 Sep '19

25 Sep '19

Dear all, Here's the agenda for the IoT working group session at RIPE 79 in Rotterdam. We're meeting on Thursday 17th October from 11:00 to 12:30. ==== 1. Administrivia 5 minutes 2. The security lifecycle of an IoT device by Michael Richardson (Sandelman Software Works) and Eliot Lear (CISCO) 50 minutes 3. Databox as a Platform for Monitoring IoT Devices at the Edge by Anna Maria Mandalari (Imperial College) 15 minutes 4. Update on the IoT Hackathon Rotterdam 2019 by Constanze Dietrich (Lexta Consultants Group) 15 minutes 5. Best Current Operational Practice (BCOP) document in RIPE scope for proactively mitigating IoT attacks by Jim Reid (RIPE IoT WG Co-chair) If time permits X. AOB ==== -- The RIPE IoT Working Group Chairs Jim and Sandoche

1 0

Fwd: IoT Working Group Minutes - RIPE 78
by Sandoche Balakrichenan 11 Sep '19

11 Sep '19

Dear all, Please find as attached the minutes of RIPE 78 IoT WG meeting. Elena (from RIPE) prepared this minutes document. Thanks for your feedback, if any. Sandoche.

1 0

[Deadline 9th September] Call for applications for the IoT hackathon, 12-13 October, Rotterdam
by sandoche Balakrichenan 04 Sep '19

04 Sep '19

Dear colleagues, RIPE is organising their first IoT hackathon (Internet of Things) on the weekend of 12-13 October in Rotterdam. The two-day event is aimed at developing IoT technologies and providing a platform for the community to collaborate, experiment and gain hands-on experience in developing IoT solutions. We have decided to combine the hackathon with the RIPE Meeting that will take place from 14-18 October, also in Rotterdam:http://ripe79.ripe.net We are looking for participants that are passionate (or sceptical!) about IoT and want to work on real-life, practical projects. That means we are looking for people from a variety of backgrounds. Applications are open for back-end and front-end developers, product owners, product managers, UX experts, innovators, network operators, hackers... If you would like to take part in the hackathon, you can apply at: https://www.ripe.net/participate/forms/apply/iot-hackathon-rotterdam-2019/ The application deadline is *9 September 2019.* You can find more information about the event on RIPE Labs: https://labs.ripe.net/Members/becha/iot-hackathon-at-ripe-79-in-rotterdam Thanks,

1 0

Call for contributions to the RIPE 79 meeting of the IoT-WG
by Sandoche Balakrichenan 22 Aug '19

22 Aug '19

Dear Colleagues, RIPE 79 will take place in Rotterdam, the Netherlands from 14-18 October 2019. Plese send your presentation ideas or suggestions for speakers or agenda items for the WG to iot-wg-chairs(a)ripe.net. Please don’t submit anything using the meeting submission web form, it’s not intended for submission of content to working groups. Thanks! Sandoche, on behalf of the working group chairs

1 0

IoT Hackathon Rotterdam 2019 -- We really want this to happen!
by Constanze Dietrich 13 Aug '19

13 Aug '19

Hi everyone! As Sandoche already announced, we're organising the tenth RIPE NCC hackathon on the IoT at the weekend before RIPE 79. However, as less than three weeks before the deadline we're still lacking applications to really pull this off, we'd be happy if you'd spread the word! So please share this link with your colleagues and friends, send it to related mailing lists, tweet it, post it, whatnot... https://labs.ripe.net/Members/becha/iot-hackathon-at-ripe-79-in-rotterdam We appreciate your support! <3 Cheers! Constanze

1 0

RIPE IoT Hackathon in Rotterdam before RIPE 79: Call for applications
by sandoche Balakrichenan 19 Jul '19

19 Jul '19

Dear all, RIPE is organising a IoT hackathon in Rotterdam, the weekend before RIPE 79. The application deadline is 1st September 2019. Details of the Hackathon and the application form link can be found in this article: https://labs.ripe.net/Members/becha/iot-hackathon-at-ripe-79-in-rotterdam In case of any clarification, you can send an email to me : sandoche.balakrichenan(a)afnic.fr. Sandoche BALAKRICHENAN

1 0