Things That Go Bump in the Night: Detecting Problems in the Internet of Things
summary
Examples: a thermometer in a casino fish tank becomes a phishing channel that exfiltrates 10 gigabytes exfiltrated; Belkin Wemo smart plugs are weaponized by bash Lite; analysis of 96 top-selling devices finds 31% no encryption 19% hard-coded keys allowing local-network takeover; keyless-relay thefts account for 92% of recovered cars in Essex; a cooking robot runs unpatched Android 6 with an undocumented microphone; anomaly detection flags a weather sensor jumping to Number 10 Downing Street and a motion sensor method using a notional queue length threshold 1250 to detect slow floods.
AI-written summary · about
chapters (38)
- 0:00Introduction
- 0:58Welcome
- 2:47Title
- 3:38Sunny Milani
- 6:07Smart fish tank
- 6:44Belkin Wemo smart plug
- 7:44Keyless car theft
- 8:44Cooking robot
- 9:39Companion apps
- 11:24Talos
- 13:13Medea
- 14:20Anomaly Detection
- 15:29Dust Sensors
- 15:55London and Boston
- 16:14Antarctica
- 16:45Boston
- 17:02London
- 17:46University of Rio
- 18:25Local Power Surge
- 19:47Conclusions
- 21:15PhD work
- 21:27Wemo motion sensor
- 24:18Queue length vs time
- 24:59Notional queue length
- 26:00Broken rules
- 27:13Suspicious combinations
- 28:31Weirdness
- 29:39Things going bump in the night
- 30:14The Marucci Shasu
- 31:36Bamburgh Castle
- 33:27Ghost story
- 36:13Wind turbines
- 36:55Jason Staggs
- 37:22State of Security
- 37:38Pants
- 38:24Why are things insecure
- 41:06Suggestions
- 43:59questions
related talks
30mVulnerabilities in the Internet of Things
55mWhere is this IoT bus taking us?
01mThe Internet of "Insecure" Things
23mSmart Devices Gone Rogue: IOT Vulnerabilities and Designing For Security
46mThe Internet of Things and iOS: Don't let your toaster bring down the internet!
48mSecuring The Internet Of Things
25mThe Ethics of the Internet of Things
13mThe dark side of IoT