Because of the tight integration of connected devices with their environment, security is a very important aspect of the Internet of Things. The aspects to take into account to secure the Internet of Things are many and exceed the classical security goals confidentiality/integrity/availability by far and can be overwhelming. In the following two parts we relate security aspects to the IoT model established in the first part, consciously simplifying and focusing on a few aspects on how to establish a secure Internet of Things. Part 4 and 5 will then open up again and look to into attack vectors and mitigation in a borader perspective.

Part 2 - Security Associations

We introduce security requirements and look closer into how to establish security relations between the different components of the Internet of Things. Well defined security relations are key to implement security protocols to connect the components.

Slides:
iot-2 security bootstrapping.pdf

Video:

Study Questions:

Security requirements: (data) Integrity is listed as security goal for both communication security and data-at-rest security. Why is that necessary, and is it sufficient to provide data integrity on a system level?
Distance bounding: reflect/discuss what distance bounding mechanisms you have experienced when installing a new device.

Part 3 - Integration into the Internet

Slides:
iot-3 tiny device.pdf

Video:

Study Questions:

Is an end-to-end security possible, if a gateway has to translate the application protocol? Why/Why not?