Sem título

Página 1

Internet of Things40Eclipse IoT is an ecosystem of entities(industry and academia) working together to create a foundation for IoT based exclusively on open source technologies. Their focus remains in the areas of producing open source implementations of IoT standard technology; creating open source frameworks and services for utilization in IoT solutions; and developing tools for IoT developers.Smarthome ProjectSmartHome is one of Eclipse IoT's major services. It aims to create a framework for building smart home solutions, and its focus remains heterogeneousenvironments, meaning assorted protocols and standards integration. SmartHome provides uniform device and information access to facilitate interaction between devices. It consists of OSGi bundles capable of deployment in an OSGi runtime, with OSGi services defined as extension points. OSGi bundles are Java class groups and other resources, which also include detailed manifest files. The manifest contains information on file contents, services needed to enhance class behavior, and the nature of the aggregate as a component. Review an example of a manifest below:Bundle-Name: Hi Everyone //Bundle NameBundle-SymbolicName: xyz.xyz.hievery1 //Header specifying an identifierBundle-Description: A Hi Everyone bundle //Functionality descriptionBundle-ManifestVersion: 2 //OSGi specificationBundle-Version: 1.0.0 //Version number of bundle21. IoT − Eclipse IoT

Internet of Things41Bundle-Activator: xyz.xyz.Activator //Class invoked on bundle activationExport-Package: xyz.xyz.helloworld;version="1.0.0" //Java packages available externallyImport-Package: org.osgi.framework;version="1.3.0" //Java packages needed from//external sourceEclipse SCADAEclipse SCADA, another major Eclipse IoT service, delivers a means of connecting various industrial instruments to a shared communication system. It also post-processes data and sends data visualizations to operators. It uses a SCADA system with a communication service, monitoring system, archive, and data visualization.It aims to be a complete, state-of-the-art open source SCADA system for developing custom solutions. Its supported technologies and tools include shell applications, JDBC, Modbus TCP and RTU, Simatic S7 PLC, OPC, and SNMP.

Internet of Things42Contiki is an operating system for IoT that specifically targets small IoT devices with limited memory, power, bandwidth, and processing power. It uses a minimalist design while still packing the common tools of modern operating systems. It provides functionality for management of programs, processes, resources, memory, and communication. It owes its popularity to being very lightweight (by modern standards), mature, and flexible. Many academics, organization researchers, and professionalsconsider it a go-to OS. Contiki only requires a few kilobytes to run, and within a space of under 30KB, it fits its entire operating system: a web browser, web server, calculator, shell, telnet client and daemon, email client, vnc viewer, and ftp. It borrows from operating systems and development strategies from decades ago, which easily exploited equally small space.Contiki CommunicationContiki supports standard protocols and recent enabling protocols for IoT:uIP (for IPv4) –This TCP/IP implementationsupports 8-bit and 16-bit microcontrollers.uIPv6 (for IPv6)–This is a fully compliant IPv6 extension to uIP.Rime –This alternative stack provides a solution when IPv4 or IPv6 prove prohibitive. It offers a set of primitives for low-power systems.6LoWPAN –This stands for IPv6 over low-power wireless personal area networks. It provides compression technology to support the low data rate wireless needed by devices with limited resources.RPL –This distance vector IPv6 protocol for LLNs (low-power and lossy networks) allows the best possible path to be found in a complex network of devices with varied capability.CoAP –This protocol supports communication for simple devices, typically devices requiring heavy remote supervision. 22. IoT − Contiki

Internet of Things43Dynamic Module LoadingDynamic module loading and linking at run-time supports environments in which application behavior changes after deployment. Contiki's module loader loads, relocates, and links ELF files.The Cooja Network SimulatorCooja, the Contiki network simulator, spawns an actual compiled and working Contiki system controlled by Cooja.Using Cooja proves simple. Simply create a new mote type by selecting the Motesmenu and Add Motes > Create New Mote Type. In the dialog that appears, you choose a name for the mote, select its firmware, and test its compilation.After creation, add motes by clicking Create. A new mote type will appear to which you can attach nodes. The final step requires saving your simulation file for future use.

Internet of Things44Every connected device creates opportunities for attackers. These vulnerabilities are broad, even for a single small device. The risks posed include data transfer, device access, malfunctioning devices, and always-on/always-connected devices. The main challenges in security remain the security limitations associated with producing low-cost devices, and the growing number of devices which creates more opportunities for attacks.Security SpectrumThe definition of a secured device spans from the most simple measures to sophisticated designs. Security should be thought of as a spectrum of vulnerability which changes over time as threats evolve. Security must be assessed based on user needs and implementation. Users must recognize the impact of security measures because poorly designed security creates more problems than it solves.Example: A German report revealed hackers compromised the security system of a steel mill. They disrupted the control systems,which prevented a blast furnace from being shut down properly, resulting in massive damage.Therefore, users must understand the impact of an attack before deciding on appropriate protection. 23. IoT − Security

Internet of Things45ChallengesBeyond costs and the ubiquity of devices, other security issues plague IoT:Unpredictable Behavior –The sheer volume of deployed devices and their long list of enabling technologies means their behavior in the field can be unpredictable. A specific system may be well designed and within administration control, but there are no guarantees about how it will interact with others.Device Similarity –IoT devices are fairly uniform. They utilize the same connection technology and components. If one system or device suffers from a vulnerability, many more have the same issue.Problematic Deployment –One of the main goals of IoT remains to place advanced networks and analytics where they previously could not go. Unfortunately, this creates the problem of physically securing the devices in these strange or easily accessed places. Long Device Life and Expired Support –One of the benefits of IoT devices is longevity, however, that long life also means they may outlive their device support. Compare this to traditional systems which typically have support and upgrades long after many have stoppedusing them. Orphaned devices and abandonware lack the same security hardening of other systems due to the evolution of technology over time.No Upgrade Support –Many IoT devices, like many mobile and small devices, are not designed to allow upgrades or any modifications. Others offer inconvenient upgrades, which many owners ignore, or fail to notice.Poor or No Transparency –Many IoT devices fail to provide transparency with regard to their functionality. Users cannot observe or access their processes, and are left to assume how devices behave. They have no control over unwanted functions or data collection; furthermore, when a manufacturer updates the device, it may bring more unwanted functions.No Alerts –Another goal of IoT remains to provide its incredible functionality without being obtrusive. This introduces the problem of user awareness. Users do not monitor the devices or know when something goes wrong. Security breaches can persist over long periods without detection.

Internet of Things46IoT devices collect data about their environment, which includes people. These benefits introduce heavy risk. The data itself does not present the danger, however, its depth does. The highly detailed data collection paints a very clear picture of an individual, giving criminals all the information they need to take advantage of someone.People may also not be aware of the level of privacy; for example, entertainment devices may gather A/V data, or “watch” a consumer, and share intimate information. The demand and price for this data exacerbates the issue considering the number and diversity of parties interested in sensitive data. Problems specific to IoT technology lead to many of its privacy issues, which primarily stem from the user's inability to establish and control privacy:Consent The traditional model for “notice and consent” within connected systems generally enforces existing privacy protections. It allows users to interact with privacy mechanisms, and setpreferences typically through accepting an agreement or limiting actions. Many IoT devices have no such accommodations. Users not only have no control, but they are also not afforded any transparency regarding device activities. The Right to be Left AloneUsers have normal expectations for privacy in certain situations. This comes from the commonly accepted idea of public and private spaces; for example, individuals are not surprised by surveillance cameras in commercial spaces, however, they do not expect them in their personal vehicle. IoT devices challenge these norms people recognize as the “right to be left alone.” Even in public spaces, IoT creeps beyond the limits of expected privacy due to its power.Indistinguishable Data IoT deploys in a wide variety of ways. Much of IoT implementation remains group targeted rather than personal. Even if users give IoT devices consent for each action, not every system can reasonably process every set of preferences; for example, small devices in a complex assembly cannot honor the requests of tens of thousands of users they encounter for mere seconds.Granularity Modern big data poses a substantial threat to privacy, but IoT compounds the issue with its scale and intimacy. It goes not only where passive systems cannot, but it collects data everywhere. This supports creation of highly detailed profiles which facilitate discrimination and expose individuals to physical, financial, and reputation harm.Comfort The growth of IoT normalizes it. Users become comfortable with what they perceive as safe technology. IoT also lacks the transparency that warns users in traditional connected systems; consequently, many act without any consideration for the potential consequences.24. IoT − Identity Protection

Internet of Things47The security flaws of IoT and its ability to perform certain tasks open the door to any associated liability. The three main areas of concern are device malfunction, attacks, and data theft. These issues can result in a wide variety of damages.Device MalfunctionIoT introduces a deeper level of automation which can have control over critical systems, and systems impacting life and property. When these systems fail or malfunction, they can cause substantial damage; for example, if an IoT furnace control system experiences a glitch, it may fail in an unoccupied home and cause frozen pipes and water damage. This forces organizations to create measures against it. This smart thermostat allows attackers to gain remote access, and breach the rest of the network.Cyber AttacksIoT devices expose an entire network and anything directly impacted to the risk of attacks. Though those connections deliver powerful integration and productivity, they also create the perfect opportunity for mayhem like ahacked stove or fire safety sprinkler system. The best measures against this address the most vulnerable points, and provide custom protections such as monitoring and access privileges. 25. IoT − Liability

Internet of Things48Some of the most effective measures against attacks prove simple:Built-in Security –Individuals and organizations should seek hardened devices, meaning those with security integrated in the hardware and firmware.Encryption –This must be implemented by the manufacturer and through user systems.Risk Analysis –Organizations and individuals must analyze possible threats in designing their systems or choosing them.Authorization –Devices, whenever possible, must be subject to privilege policies and access methods.Bitdefender BOX secures all connected devices in the home.Data TheftData, IoT's strength and weakness, proves irresistible to many. These individuals have a number of reasons for their interest: the value of personal data to marketing/advertising, identity theft, framing individuals for crimes, stalking, and a bizarre sense of satisfaction. Measures used to fight attacks are also effective in managing this threat.

Internet of Things49The following resources offer more in-depth information on IoT development and administration. You can refer them to increase your knowledge on IoT further.Useful IoT WebsitesInternet of Things Council–This European think tank offers the best and latest IoT information. They analyze every aspect of IoT from forecasting to discussing prototype development, and the social implications of IoT.LinkedIn Pulse Content–LinkedIn, described as the world's largest professional network, allows over 100 million professionals to network. It opened its publishing platform, Pulse, to the public in 2014, resulting in a wealth of valuable professional and industry information. This information includes rare insight, training media, and more related to IoT systems and technologies.Lynda.com IoT Videos –This online learning organization offers thousands of videos on various topics (including IoT) supplied by professionals, organizations, and individuals. YouTube IoT Videos–Individuals just like you produce thousands of IoT videos on YT to address particular topics not covered elsewhere, or covered poorly elsewhere.