- iot-wg - mailman.ripe.net

IoT BCOP TF Document - Call for comments
by sandoche Balakrichenan 26 Oct '20

26 Oct '20

Dear all, The IoT BCOP TF (/Jim Reid, Eliott Lear, Michael Richardson, Phil Stanhope, Peter Steinhäuser, Jelte Jansen, Jan Zorz, Sandoche Balakrichenan/) has been meeting almost every friday since RIPE 80 to produce the document titled : /"Architectural Considerations for IoT Device Security in the Home - //A guide for ISPs specifying CPE devices"/. The intention is to publish the final version of this document as RIPE Best Current Operational Practice (BCOP) document in the IoT scope. A Pdf format of the document is attached. Thanks for sending your comments on this document to the mailing list. Constanze & Sandoche (IoT WG Chairs)

4 3

Reminder: IoT WG (and friends) virtual Meetup tonight!
by Constanze Dietrich 26 Oct '20

26 Oct '20

*** Cancel all your dates! *** Tonight from 19:00 to 21:00 CET (UTC+1) we'll have our virtual Meetup "at the hotel bar"! Location: https://ripe.zoom.us/j/96850826494?pwd=ZGFlbFNRZTZZTnBZU1JiWWNNRms0dz09#suc… Meeting ID: 968 5082 6494 Passcode: 391117 Hope to see you all there! Constanze & Sandoche

1 0

Re: [iot-wg] IoT BCOP TF Document - Call for comments
by Michael Richardson 23 Oct '20

23 Oct '20

<#secure method=pgpmime mode=sign> sb> The IoT BCOP TF (/Jim Reid, Eliott Lear, Michael Richardson, Phil sb> Stanhope, Peter Steinhäuser, Jelte Jansen, Jan Zorz, Sandoche sb> Balakrichenan/) has been meeting almost every friday since RIPE 80 to sb> produce the document titled : /"Architectural Considerations for IoT sb> Device Security in the Home - //A guide for ISPs specifying CPE sb> devices"/. The intention is to publish the final version of this sb> document as RIPE Best Current Operational Practice (BCOP) document in sb> the IoT scope. Some feedback that we have received is that the document isn't able to provide clear guidance that would make it a BCOP. It is perhaps more of a technical report. An initial goal had been to be able to say what ISPs are currently doing with IoT devices, and thereby enable those who are writing RFPs to know what kind of things they might expect to be able to ask for. But, it's still too soon for that. So a question is: what category should we put on this document? -- Michael Richardson <mcr+IETF(a)sandelman.ca> . o O ( IPv6 IøT consulting ) Sandelman Software Works Inc, Ottawa and Worldwide

1 0

RIPE81 agenda and virtual meetup on 26 October
by Constanze Dietrich 19 Oct '20

19 Oct '20

Hi everyone! We've got two announcements regarding the upcoming RIPE meeting! ***** THE AGENDA for the IoT session of RIPE 81 (27 to 30 October) is set! ***** You can find the full Meeting Plan here: https://ripe81.ripe.net/programme/meeting-plan/ This time, we have 45 minutes on Thursday, 29 October, between 14:00 and 14:45 CET (UTC+1): -- Introduction (5 minutes) -- RIPE NCC IoT Update - MarcoHogewoning (10 minutes) -- Architectural Considerations for IoT Device Security in the Home: A guide for ISPs specifying CPE devices - IoT BCOP Task Force (30 minutes) [Quick reminder to review their work and help them with constructive feedback: https://www.ripe.net/ripe/mail/archives/iot-wg/attachments/20201013/5ab7a0d… ] ***** VIRTUAL MEETUP of the IoT WG (and friends) on Monday, 26 October, 19:00 to 21:00 CET (UTC+1) ***** As having 15 minutes more on hand than last time is certainly no substitute for coffee and lunch breaks, beerings or other social gatherings, we've arranged for a virtual get-together on Monday evening before RIPE 81 as a Zoom meeting. There's no agenda! We'd like to say hi, get to see and know each other, and have a few drinks of our choice together at the virtual "hotel bar". You'll find the link to the Zoom meeting here: https://ripe81.ripe.net/programme/parallel-events/#iot Hope to see you there! Constanze & Sandoche (IoT WG Chairs)

1 0

Fwd: interesting article
by sandoche Balakrichenan 04 Oct '20

04 Oct '20

Dear all, Vesna (RIPE) send us the following article ("Security Considerations for Internet of Things: A Survey"), which I am sure will be an interesting read. === https://link.springer.com/article/10.1007%2Fs42979-020-00201-3 Survey Article Published: 06 June 2020 Security Considerations for Internet of Things: A Survey Anca Jurcut, Tiberiu Niculcea, Pasika Ranaweera & Nhien-An Le-Khac === Sandoche.

1 0

Fwd: [n2women] 1st Annual Nelms (Online) Workshop on Women in IoT, October 12, 1pm-5pm (EDT)
by Vesna Manojlovic 29 Sep '20

29 Sep '20

FYI! -------- Forwarded Message -------- Subject: [n2women] 1st Annual Nelms (Online) Workshop on Women in IoT, October 12, 1pm-5pm (EDT) Date: Mon, 28 Sep 2020 14:30:30 -0400 From: Damla Turgut <turgut(a)EECS.UCF.EDU> Reply-To: N2Women <n2women(a)ACM.ORG>, Damla Turgut <turgut(a)EECS.UCF.EDU> To: n2women(a)ACM.ORG ************************** **CALL FOR PARTICIPATION** ************************** 1st Annual Nelms Workshop on Women in IoT Virtual Conference October 12, 1pm-5pm EDT (New York Time Zone) Register now at: http://iot.institute.ufl.edu/events/women-in-iot-2020/ Registration is free, but required to receive the zoom information. ************************** **WORKSHOP DESCRIPTION** ************************** The web of smart and connected devices that form the Internet of Things (IoT) is poised to impact every sphere of our lives as well as every market sector and drive the fourth industrial revolution. While IoT, in convergence with artificial intelligence (AI) and big data analytics, is rapidly changing our lives and society at large, we also face an increasing gender gap in the field of IoT technology and applications encompassing all aspects of research, development and practice. The goal of this workshop is to bring together women leaders from all sectors of IoT and students interested in the field of IoT to promote and enable increasing participation of women and addressing the gender gap issue in the field of IoT. The workshop organized by the members of the Warren B. Nelms Institute for the Connected World at University of Florida , in collaboration with several other universities in the state of Florida, will be held virtually; is free to join and open to all with registration. We cordially welcome participants from all sectors to join the workshop and contribute to its mission. ************************ **PROGRAM HIGHLIGHTS** ************************ The purpose of the workshop is to celebrate the achievements of women in areas related to the advancement of Internet of Things, discuss future changes in both technology and female advancement, and to encourage students and junior female faculty in this area. The list of speakers/panelists includes female engineering deans, department chairs, NSF program director and industry directors. The event webpage is here and includes the speaker bios: http://iot.institute.ufl.edu/events/women-in-iot-2020/ We are looking forward to seeing you soon in the online conference of Nelms WiT 2020! 2020 Co-Chairs: --------------------- Janise McNair, ECE, University of Florida My T Thai, CISE, University of Florida Organizing Committee: ------------------------------ Janise McNair, ECE, University of Florida My Thai, CISE, University of Florida Damla Turgut, CS, University of Central Florida Tempestt Neal, CIS, University of South Florida Liting Hu, CS, Florida International University ******** Website: http://iot.institute.ufl.edu/events/women-in-iot-2020/

2 1

Zigbee Alliance's Connected Home over IP
by Peter Steinhäuser 10 Sep '20

10 Sep '20

Dear collegues, after announcing the Project Connected Home over IP end of last year getting Amazon, Apple and Google on board for a joined effort to establish an IP based standard for IoT devices the project seems to be mostly on track for an initial early 2021 release: https://zigbeealliance.org/news_and_articles/project-development-to-reality/ <https://zigbeealliance.org/news_and_articles/project-development-to-reality/> I think this project might be of interest for this working group and for the RIPE community. I will further monitor the progress of the project and would like to invite everyone interested for a discussion one’s first standard specs are released. Thanks, Peter

2 1

Fwd: interesting article?
by sandoche Balakrichenan 19 Aug '20

19 Aug '20

Dear all, Vesna (RIPE) send us this document (https://www.cigionline.org/publications/standards-cybersecure-iot-devices-w…) to check if it could be interesting for the group. After skimming through it, I felt that the document could be useful, even though the contents are not entirely new AFAIK. Sandoche.

2 2

[Defcon 2020] Paul Marrapeses' speech about IoT P2P protocol design flaws
by Peter Steinhäuser 10 Aug '20

10 Aug '20

Dear Collegues, Paul Marrapese did some excellent work on researching about protocol vulnarabilities in popular IoT devices. https://www.youtube.com/watch?v=Z_gKEF76oMM Unfortunately I did not find a transcript, yet. Nevertheless the conclusion is to keep IoT devices disabled to communicate with the internet if possible and it also shows - again - the lack of interest from the device makers to adress the security flaws. Wishing you all a productive week and stay healthy. - Peter

2 1

"Nutrition labels for IoT"
by Vesna Manojlovic 11 Jul '20

11 Jul '20

from: https://pluralistic.net/2020/06/09/war-crimes/#iot Nutrition labels for IoT A group of CMU researchers just presented "What Should Be on an IoT Privacy and Security Label?" at the IEEE Symposium on Security & Privacy. They present a model for "privacy labels" to clarify the privacy implications of IoT gadgets. https://www.computer.org/csdl/proceedings-article/sp/2020/349700a771/1j2LfT… I confess that I was skeptical of this, but the labels themselves are *really* good, clear and legible. https://www.wired.com/story/iot-security-privacy-labels/ But...The more I think about this, the more my skepticism returns. We've seen tools like Privacy Badger and Ghostery that tell you how your data is being used by the websites you visit, but these haven't shown much efficacy in changing sites' behaviors. Historically, the best counter to these "antifeatures" in technology has come from a) self-help measures and b) regulation. We didn't kill pop-up ads by notifying users of which sites had pop-up ads so they could choose to go elsewhere. We gave them pop-up blockers. Today, the best way to deal with your alarm about Privacy Badger warnings is to beef up your script-, tracker- and ad-blocking. https://www.eff.org/deeplinks/2019/07/adblocking-how-about-nah And there's a role for regulation here, too, which can take many forms. We can simply prohibit certain conduct, like collecting, retaining or selling data outside of a highly constrained set of circumstances. Or we could establish a federal privacy law with a private right of action, so users could sue companies that leaked their data and collect statutory damages - a measure that would cause every insurer to instantaneously withdraw coverage for every surveillance tech company. Don't get me wrong. I love these labels. But there is a huge danger in documenting bad conduct without providing a means to counter it - the danger that you train people to accept the bad conduct as inevitable.

2 1