- iot-wg - mailman.ripe.net

Cyber-Physical Systems and Internet-of-Things Week : Online / Virtual event, April 21-24 2020
by Vesna Manojlovic 20 Apr '20

20 Apr '20

Dear colleagues, this might be interested to the IoT-WG, e.g.: https://conferences.computer.org/iotDI/2020/ & http://open-storm.org/workshop-cps2020/ Please see more event details below. Regards, Vesna Manojlovic Community Builder RIPE NCC -------- Forwarded Message -------- From: Katia Jaffrès-Runser <kjr(a)ENSEEIHT.FR> CPS-IoT Week 2020 (April 21-24) offers complementary registrations to non-authors for the four conferences it brings together : IPSN, ICCPS, HSCC and RTAS, plus guest conferences and workshops : https://www.cse.unsw.edu.au/~cpsiot/cpsweek2020/index.html You can find below the IPSN 2020 General Chair's message that invites you to attend this virtual edition. Stay safe, Damla and Katia N2Women Co-Chairs > Please see below an invitation from the IPSN 2020 general chair to > join this year’s conference at no cost in its new, virtual format. > > ===================================================================================== > > Dear IPSN community,____ > > __ __ > > We are excited to invite you to attend IPSN 2020 for free, from the > comfort of your home office! Please visit our website to see the > detailed program and registration > links: https://ipsn.acm.org/2020/program.html____ > > __ __ > > Also see the attached documents for the event highlights and to learn > more about the virtual format and collaborative tools we provide.____ > > __ __ > > On behalf of the organizing committee, I would like to encourage you > to participate and actively use all of the available tools to connect, > exchange ideas, and provide constructive criticism.____ > > ____ > > Stay safe!____ > > __ __ > > Brano Kusy____ > > IPSN'20 General Chair____ > > brano.kusy(a)csiro.au <mailto:brano.kusy@csiro.au> >

1 0

RIPE80 Agenda
by Jim Reid 20 Apr '20

20 Apr '20

I expect you all know by now that the covid19 pandemic means RIPE80 will be going ahead as a virtual meeting. It will take place over three days, two of them for WG sessions. RIPE80 will have no parallel sessions. So almost all WGs are going to get a 45 minute slot. The meeting plan is here: https://ripe80.ripe.net/programme/meeting-plan/ The IoT WG only has a 30 minute slot. We can probably expect to lose a few minutes too sorting out the AV settings and the handover to the Open Source WG. That means we won’t have enough time for topics that will need a lot of discussion or detailed presentations. There is a small amount of time available in the agenda - say for announcements about an upcoming activity/project or updates about recent IoT-related events. If you have suggestions for possible agenda items or have something to present, please contact the co-chairs at iot-wg-chairs(a)ripe.net and give an indication how much time is needed. Thanks. Hope to see you all (virtually) at RIPE80.

1 0

My response to Ronald Guilmette
by Elad Cohen 18 Apr '20

18 Apr '20

Hello Everyone, Please forgive me for not writing an official response in first set of Ronald's online madness months ago, I was out of hospital after full anesthesia and it took me months to get back to myself. Ronald is misery person with nothing and with no one in his life, the only joy that he have in his life - is for him to serve as the front person of the illegal anonymous organization "The Spamhaus Project". Here is a presentation that "The Spamhaus Project" wrote on themselves (in the following link) and according to it Spamhaus is an illegal anonymous organization - they receive a massive amount of illegally obtained privacy data of internet users from internet companies and internet organizations on a regular basis - and then they share it in illegal way (without any warranty) with law enforcement agencies. https://www.scribd.com/document/445894312/Spamhaus-Illegal-Private-Data-Vio… Ronald doesn't deny himself being part of "The Spamhaus Project", not only that - but his old friend Hank Nussbacher is also part of the illegal anonymous organization "The Spamhaus Project", Hank reminds me Judas Iscariot - Hank obviously have other interests - it is very sad to see a person at the age of Hank acting like a little child. All the few reports that were made were made by reporters which are connected to "The Spamhaus Project" and that are part of "The Spamhaus Project" - not only that, the source of the media reports is a person in "The Spamhaus Project" which is the owner of that illegal twitter account: https://twitter.com/underthebreach , that person is a criminal according to his own words in his own twitter account - and that person is also a master of cyber influence operations (just like what Coconut Guilmette and Cheerleader Nussbacher are doing here, to influence public opinion without any single proof) - and the owner of that twitter account is also an employee of the israeli-based company GeoEdge which financially benefit from that media report because they are a direct competitor of the company using the exact same netblock, so now I'm explaining to you that that root of this all fake story is just business competition, and in addition Coconut Guilmette also attacked the Israeli-based company Divinetworks in Nanog (Coconut Guilmette searched an unreasonable way why they received a specific grant from a global world organization and also defamed them) - so here is why he did it - the Israeli-based company Divinetworks is also a direct competitor of the Israeli-based company GeoEdge - that their employee is a criminal and the owner of the illegal twitter account https://twitter.com/underthebreach and also the "source" for the fake few media reports. In the following link you can see how a high manager in GeoEdge is highly proud in how customers attracted to him after the "low value" of competitors, if only the world would knew how that company does business. https://imgur.com/7DF1NSP That company GeoEdge is not only a criminal company in the way that they do business (because their criminal employee in "The Spamhaus Project" is the one pumped Coconut Guilmette proof-less ideas), but that company is also a criminal in the way that they are tax-evading since 2005 (they are registered in Cyprus with fake-single-owner abroad while they have more actual hidden owners in Israel that didn't pay any tax for their income since 2005, and one of the registered owners is using an international fake name and he is a professional money-laundering person, not only for that Israeli company). They (Coconut Guilmette, Cheerleader Nussbacher and their mob friends at "The Spamhaus Project") are very very afraid of me releasing all the information that I found out on the illegal anonymous organization "The Spamhaus Project" - and that is the only reason that they are attacking me personally in such way, they are trying to ruin my good name - but they didn't succeed and they will not succeed - because anyone that knows me and anyone that will personally know me - will know what they are trying to do and that what they are writing is 100% false. All the personal attack against me - is only because I dared to stood up against "The Spamhaus Project" which is intimidating and hurting many businesses online, and I would and will do it again and again and again, I'm not the kind of a misery bendover jew like Hank that will sell his values and his being for a title, a group acceptance or a few cents. Coconut Guilmette, is not only a sick person, in body and mind, but also a racist and an antisemitic, you can see in the following links his stereotypical mindset: https://imgur.com/AcmgwEX (Coconut Guilmette opinion on all Dutch people as a whole - "Dutch are any more inclined toward cybercrime") https://imgur.com/WUZvdNJ (Coconut Guilmette opinion on all Colombian Network Operators usage of the internet as a whole - "Undoubtedly drug smuggling over HTTP") https://imgur.com/a/1ULfVEC (Coconut Guilmette opinion on the City of Chicago including all of its citizens as a whole - "American city most known for its high ideals and consistantly ethical behavior, Chicago") https://imgur.com/AQCmZlk (Coconut Guilmette identified as racist in Nanog) https://imgur.com/a/Rzrbxkz (Coconut Guilmette identified as antisemitic in Nanog) Besides the above links, Coconut Guilmette is specifically calling me with two words and here he is quoting Shakespeare: https://imgur.com/AcmgwEX , the two words that Coconut Guilmette is calling me are being used in Shakespeare litrature to identify jews in an antisemitic way, Coconut Guilmette is an antisemitic, I'm very sorry to write it but Ripe is not a decisive organization towards racism or antisemitism, the Tone in Ripe management and in Ripe board and in this working group co-chairs, is a very narrow tone that only reflect the good of the people in their positions, Ripe board & management are not taking any actions for Ripe to be a multi-culture multi-national unpolitical organization that it needs to be with the tolerance to anyone and with the decisive intolerance to racism or antisemitism. The encouragement of Cheerleader Nussbacher is even worst because Cheerleader Nussbacher is encouraging someone which is a racist and an antisemitic. Hank, how more self-hating jew can you be ? to support such person only to be part of an illegal anonymous organization ? to support racism ? to support antisemitism ? And to the rest of the community, anyone that wrote to this person - "nice story, but you could say it in other words" - you are a lowlife as Hank is, you don't treat a racist or an antisemitic person with tolerance, period. Ripe is a RIR which is spread over 3 continents over many countries, Ripe members are different from each other by all means, I would expect Ripe community not to tolerate racism in any way and when Ripe members see it - to stand up - like I dared to stand up against "The Spamhaus Project". Ron, seeing a person at your age that knows to get attention only by using racism and antisemitism is sad, but seeing the lowlife Judas Iscariot cheerleading your mental illness is sadder. Here are only some of the real identities of the people behind "The Spamhaus Project": "Rob Shultz" - Rob McEwen (https://www.invaluement.com/) "Thomas Morrison" - Daniel R. Thomas (https://personal.cis.strath.ac.uk/d.thomas/) "Pete Dawes" - Ildiko Pete (https://www.cl.cam.ac.uk/~ip358/) "Vincent Hanna" - Vincent Schonau of Open-Xchange (https://www.linkedin.com/in/vincentschonau/) "Milly Fawcett" - Kelly Molloy of FarSight Security (https://www.linkedin.com/in/kelly-molloy-b886442/) Among others Commericial companies behind "The Spamhaus Project": ThreatSTOP FarSight Security Fastly Cymru Among others Keep on playing with me Coconut Guilmette and Cheerleader Nussbacher and I guarantee to you that the full list will be written here, you can hurt me as much as you please - I am not boneless and will not fold like Hank "Judas Iscariot" Nussbacher. The only reason that Coconut Guilmette returned to life in this thread - is because I wrote two days ago the real identity of "Rob Shultz" (which is Rob McEwen of https://www.invaluement.com/ ) to the co-chairs of this working group with CC to Ripe Board and to Ripe Management, I asked for the initial post of lies of Coconut Guilmette to be removed and I showed to them the relation of one of the current co-chairs of that working group to the illegal anonymous organization "The Spamhaus Project" which the poster Coconut Guilmette is related to it too. (also in the past there was a co-chair of that working group which is part of "The Spamhaus Project", Richard D G Cox, as you can see in his presentation that I linked to it above) That is the only reason (that I revealed that "Rob Shultz" from "The Spamhaus Project" is Rob McEwen) that Coconut Guilmette and Boneless Nussbacher are personally attacking me, not only that - but soon you will also see a new fake media report about me from the same reporter that used the criminal https://twitter.com/underthebreach as his source - all of it (like it was then and like they are trying to do now) - is to maneuver the subject of who are the real people behind "The Spamhaus Project" and to which internet companies and internet organizations they are connected to. "The Spamhaus Project" is an illegal anonymous organization and an unregulated organization, by being unregulated it is abused by the some of the members of it for making money, without any supervision, for example the criminal which is the owner of the illegal twitter account https://twitter.com/underthebreach that did what it did only that GeoEdge will earn a few more cents, such as Laura Atkins from WordToTheWise which is selling a Spamhaus listing removal service (https://wordtothewise.com), such as Vincent Schonau (AKA "Vincent Hanna" of "The Spamhaus Project") from Open-Xchange, a company that Spamhaus are attacking its competitors, and there are many more Spamhaus members that are using Spamhaus for their financial benefits. "The Spamhaus Project" - by being unregulated and unsupervised - is also being used as tool to attack business competitors, this is something that should wake up each and every member of the internet community. Hank, why do you let Coconut Guilmette to do the hard work for you (of defaming me) ? because you know that he have nothing in his life and a lawsuit against him will not result any financial aid ? why are you abusing his mental illness ? you know that he is not fine, why don't you help him like a good old friend ? Go ahead and write what Ron is writing so I will be able to sue you locally in Israel (I'm willing to pay you 100,000 NIS if you are right in a single thing that you wrote or that you will write against me, are you willing to do the same ? are you willing to put your money where your words are? or are you boneless that can only exploit the state of your old friend? ) I respect Ripe NCC and Respect all the members of Ripe Anti-Abuse Working Group. (P.S.: you can recognize now any member of "The Spamhaus Project" that will jump now, if he will attack me or support Ron, you can just ask him a simple question - "show us a single proof" - and you will see that no proof will be displayed, because all of it is part of an illegal "cyber influence operation" by "The Spamhaus Project" pumped by the criminal https://twitter.com/underthebreach) Respectfully, Elad

2 2

Re: [iot-wg] New on RIPE Labs: Visualisations of Periodic IoT Traffic
by Eliot Lear 26 Mar '20

26 Mar '20

Hi Poonam Thanks. The concern here is that the device could choose to identify as something else through a set of false communications. It is indeed an interesting area of research. I am not saying there is nothing to be done, but it is something that requires careful consideration as we aim toward automating policy. I fear in particular that the cloud makes this quite a bit harder, and IOT manufacturer use of their own DNS infrastructure will make it yet more difficult, because we are all using the same cloud infra. Eliot On 19.03.20 15:42, Poonam Yadav wrote: > > Dear Elliot, > > Thank you for your very important question. In the current setting, > our router verifies packets using devices' MAC addresses; it means the > router has a list of mac addresses of all IoT devices. For another > work, we used certificate-based authentication between the router and > device MUD server, something > similar: https://docs.microsoft.com/en-us/azure/iot-edge/how-to-authenticate-downstr… > > We used off-the-self IoT devices so its not easy to integrate many TEE > based solutions. > > Best regards, > > Poonam > > > > On Thu, Mar 19, 2020 at 12:47 PM Eliot Lear <lear(a)ofcourseimright.com > <mailto:lear@ofcourseimright.com>> wrote: > > Very interesting work! > > A cautionary question: > > If I wanted to pretend to be one of these devices on your network, > how hard would it be? > > Eliot > > On 19.03.20 12:56, Poonam Yadav wrote: >> Thanks for sharing! >> >> We have analysed similar pattern in many IoT devices and >> presented periodicity in IoT traffic as FFT (fig 4 - of IoTDI >> paper attached for reference) and some initial results here in >> this report: >> https://www.repository.cam.ac.uk/handle/1810/284092 >> and full paper is here: >> https://dl.acm.org/doi/10.1145/3302505.3310082 >> >> Best regards, >> >> On Thu, Mar 19, 2020 at 10:31 AM Mirjam Kuehne <mir(a)ripe.net >> <mailto:mir@ripe.net>> wrote: >> >> Dear colleagues, >> >> IoT devices often perform activities on a periodic basis. >> Thymen Wabeke >> of SIDN Labs shares his analysis of periodic network traffic >> from IoT >> lightbulbs. Read it on RIPE Labs at: >> >> https://labs.ripe.net/Members/thymen_wabeke/visualisations-of-periodic-iot-… >> >> Kind regards, >> Mirjam Kühne >> RIPE NCC >> >> _______________________________________________ >> iot-wg mailing list >> iot-wg(a)ripe.net <mailto:iot-wg@ripe.net> >> https://lists.ripe.net/mailman/listinfo/iot-wg >> >> >> _______________________________________________ >> iot-wg mailing list >> iot-wg(a)ripe.net <mailto:iot-wg@ripe.net> >> https://lists.ripe.net/mailman/listinfo/iot-wg >

3 2

Re: [iot-wg] New on RIPE Labs: Visualisations of Periodic IoT Traffic
by Mirjam Kuehne 19 Mar '20

19 Mar '20

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi Eliot, Thymen asked me to pass this on to you (but I believe he is now subscribed to the list): - -- Eliot has a valid point. We didn’t focus on this aspect yet, but it’s good to keep that in mind. In general, adversaries can fool any machine learning model once they know the model parameters. One can exploit the parameters to craft so-called "adversarial examples” that will generate a specific output/classification. This is actually a research topic on it’s own called adversarial machine learning [1]. This blog [2] shows some famous examples using images of pandas. [1] https://en.wikipedia.org/wiki/Adversarial_machine_learning [2] https://openai.com/blog/adversarial-example-research/ - --- Kind regards, Mirjam On 19/03/2020 13:47, Eliot Lear wrote: > Very interesting work! > > A cautionary question: > > If I wanted to pretend to be one of these devices on your network, > how hard would it be? > > Eliot > > On 19.03.20 12:56, Poonam Yadav wrote: >> Thanks for sharing! >> >> We have analysed similar pattern in many IoT devices and >> presented periodicity in IoT traffic as FFT (fig 4 - of IoTDI >> paper attached for reference) and some initial results here in >> this report: https://www.repository.cam.ac.uk/handle/1810/284092 >> and full paper is here: >> https://dl.acm.org/doi/10.1145/3302505.3310082 >> >> Best regards, >> >> On Thu, Mar 19, 2020 at 10:31 AM Mirjam Kuehne <mir(a)ripe.net >> <mailto:mir@ripe.net>> wrote: >> >> Dear colleagues, >> >> IoT devices often perform activities on a periodic basis. Thymen >> Wabeke of SIDN Labs shares his analysis of periodic network >> traffic from IoT lightbulbs. Read it on RIPE Labs at: >> >> https://labs.ripe.net/Members/thymen_wabeke/visualisations-of-periodi c-iot-traffic >> >> >> Kind regards, >> Mirjam Kühne RIPE NCC >> >> _______________________________________________ iot-wg mailing >> list iot-wg(a)ripe.net <mailto:iot-wg@ripe.net> >> https://lists.ripe.net/mailman/listinfo/iot-wg >> >> >> _______________________________________________ iot-wg mailing >> list iot-wg(a)ripe.net >> https://lists.ripe.net/mailman/listinfo/iot-wg -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJec4DqAAoJEIZoWwVN2sgM2hUP/RBvIpcXAfHp97uMnfeqzYE4 rSR5Sa5GkQ6uOC3Pu/4uO96ln2m9H/Oy9Bgnz/k3U1KpFPW5MqJHom1Ckmgdxs0a u9/ruzdk/rVCggtWXifY1TIjm0PJ2sOVKd7ERACITlzMOG0xnMll2Ah8NX5AsV2O j+KIO47vbnoZdaqyq/pmCvDQMazEcT2hU9z6KLwIvE436Er6YqluCkvuMPyacARL slj7K2o9gUZJ+3ianIRuRBpGRgTDruSJfEs7XAB+Lfms6BhfspgTANNaRHPMzqLN r8TeaQ7A2swpDnKOyUWWTqT/P/7qK/eZkt/ErWtM55ZFgV8wMZcd8KCsifU+Z1nv oZw67sgJUL618PCHzYdii28FAjciqQaQbLWGDgyOS4ItgSKYh4R2YwcpkqkJHvv4 YY/YjJYqM1cARLlUx3TZzk5PXvWMPc70XQTPpFyyM3t+hIDhnU7qZyt6wBBv2JUP 6j5ep/44XZ4tF4zWkbZZlKbrmkUxCNYPIwHmRZr94Sq8atQMTfw4QoK6hLxw9jf7 XpqAZmsU/2t+6hRHeAack/tvOoVUC1Xzue+upyjrYs8j3otgOPaznWWFN1vIEGZv 8h35qzp+QeQGoB4LjVxVelhdP0uf7GlXjgGgRs+0O308ApMZOz3n4ArO+8SynFhH I/hriOFDdJMqKK8rA6Ci =qLA6 -----END PGP SIGNATURE-----

1 0

New on RIPE Labs: Visualisations of Periodic IoT Traffic
by Mirjam Kuehne 19 Mar '20

19 Mar '20

Dear colleagues, IoT devices often perform activities on a periodic basis. Thymen Wabeke of SIDN Labs shares his analysis of periodic network traffic from IoT lightbulbs. Read it on RIPE Labs at: https://labs.ripe.net/Members/thymen_wabeke/visualisations-of-periodic-iot-… Kind regards, Mirjam Kühne RIPE NCC

2 1

IoT BCOP Document
by sandoche Balakrichenan 18 Mar '20

18 Mar '20

Dear all and Michael, I am piggybacking on Michael's last mail on the IoT BCOP document. We have been discussing this topic for a while and we need to go further. Last time, we discussed there was a brief consensus for this subject within RIPE Scope : "/Best Current Operational Practice (BCOP) document in RIPE scope for proactively mitigating IoT attacks/". If there is an alternative opinion, *please express*. There were proposals from Eliot and others, that we should begin with an *outline*. The initial outline was as follows: ------- The threat Some background on device capabilities and limitations Who can do what to improve the situation? Devices CPE gear Upstreams IoT Manufacturers Consumers (let's not ask much) ------- The functionality for controlling the home network traffic would typically include: Insight in all the devices connected to the home network. Possibility to block traffic. End-user friendly GUI and traffic management possibility. Option to have the traffic management outsourced (e.g. to an ISP). Blocking of compromised IoT devices. ------- We could have discussion on the following points: 1. Outline 2. Volunteers (who wish to contribute) 3. Champions (who will lead the work) - We could limit the number of Champions 4. A deadline These are my two cents. Please feel free with your feedback/contributions. Sandoche.

1 1

Interest for a virtual RIPE 80 meeting
by sandoche Balakrichenan 18 Mar '20

18 Mar '20

Dear all, As you all know RIPE 80 will happen between 11-15 May 2020 in Berlin. With the Covid-19 situation, there is a query from the RIPE meeting Organisers to the chairs on whether there will be interests from the WG to continue with sessions and presentation in case of a remote meeting? In the event, there is a remote meeting, it will be shortened (may be it will happen in a single day) overall RIPE meeting. The chairs would like to know from the WG: A. Would you like to continue with sessions and presentations in the case of a remote meeting? B. If yes to A, do you think we could limit to one or two remote presentations (Overall max. time allocated to IoT WG could be 30 to 40 minutes)? We have already three interesting presentations planned for RIPE 80 or do you think we should allocate the time for presenting any other topic that needs to be discussed urgently. C. Would you envision anything beyond having speaker and slides available with chat and stenography? Thanks for your feedback. RIPE IoT WG Co-chairs, Sandoche and Jim.

6 6

EduRoam for IoT
by sandoche Balakrichenan 10 Dec '19

10 Dec '19

Dear all, I am sure that you might have all heard about EduRoam (https://www.eduroam.org/how/). We are in discussion with some academic partners to develop a platform similar to EduRoam for IoT, initially for Research purposes. The idea initially is to have IoT devices (e.g. LoRa devices) authenticated in visited networks based on its identifier. For example, a LoRa end-device which has established authentication in its home network (e.g. in University A) should be able to connect to a gateway and Network Server in a visited network (e.g. In University B) with the same security credentials. This is not a new idea. We can see that there have been related works at the IETF, WBA alliance etc. The purpose of this mail is to know if any of you are aware of similar work and will this topic be of interest for the RIPE community? Thanks for your suggestions, contacts, feedback. Sandoche.

3 4

New on RIPE Labs: How Consumer IoT Devices Expose Information
by Mirjam Kuehne 13 Nov '19

13 Nov '19

Dear colleagues, For those who missed Anna Maria Mandalari's presentation at RIPE 79, you can now read the summary of her interesting (and scary) research on RIPE Labs: How Consumer IoT Devices Expose Information https://labs.ripe.net/Members/anna_maria_mandalari_2/how-consumer-iot-devic… Kind regards, Mirjam Kühne RIPE NCC

1 0