Department of Information Security (IS),

Military College of Signals (MCS), NUST

Course : IoT Security
Course Code : IS-441
Lectures/ Labs : 2+1 /week

Instructor : Major Ammar Hassan

ammar.hassan@mcs.edu.pk

https://ammarhassan.me/
2
 About Me (Ammar Hassan)
 MS Information Security - 2021 to 2023 (Gold Medallist)
 MCS (Masters in Computer Science) - 2017 to 2019 (Distinction)
 BETE (Telecommunication Engr) – 2008 to 2012
 Certified Ethical Hacking (CEH) Master
 Certified App Sec Practioner (CAP)
 Cisco Certified Networking Technician (CCENT)
 Microsoft Azure Administrator
 Certified Secure Computer User (CSCU)
Hassan 3
About Me (Ammar Hassan)

Hassan 4
 Objectives of the Course

Understand the principles and methodologies for designing and

implementing Internet of Things

Analyze threats to IoT systems, attack vectors, current security

regulations and standards and common security architectures

Analyze IoT Software development lifecycle and study privacy

management techniques

Design and construct Secure IoT solutions and conduct security /

privacy assessment
Hassan 5
 Brief Outline of Course

 Fundamentals of Internet of Things  Threat Modeling an IoT System

 IoT Components and Architecture  Security testing Methodology

 IoT Security Challenges  Exploiting Zero Configuration

Networking
 Privacy Violation and Data Leakage
Attacks  Hardware Hacking

 Firmware Testing Methodology  Securing Embedded /SCADA Systems

 Application Layer Protocols  Security Standards

 Web of Things
Hassan 6
 Grading Criteria

ASSIGNMENTS QUIZ’S 10% MID TERM 30% FINAL EXAM

10% 50%

Note: Subject to change, students will be notified

Hassan 7
According to the Word Economic Forum ” We stand on the brink of a
technological revolution that will fundamentally alter the way we live, work,
and relate to one another. In its scale, scope, and complexity, the
transformation will be unlike anything humankind has experienced before”
Hassan 8
 Industrial Revolutions

1st 2nd 3rd 4th

1760s 1870s 1960s NOW
Steam engine Electricity Computers Hyper-connectivity
Mechanization Mass production Automation
Internet

Revolutions have triggered profound

changes in economic systems and
social structures.

Hassan 9
 The Future

Technologies Driving

Biotechnology
Internet of Things
Artificial Intelligence (AI)
Data Analytics
Quantum computations
Robotics
Virtual reality

(IoT) Blockchain

Hassan 10
IoT ?
 Internet of Things

The Internet of Things (IoT) is the network of physical objects or "things"

embedded with electronics, software, sensors, and network connectivity,
which enables these objects to collect and exchange data

Hassan 12
 Internet of Things

 Multiple technologies like machine learning, artificial

intelligence, real time analytics, embedded systems, wireless
sensor networks, control systems, automation and others all
contribute to enabling the Internet of things (IoT)
 It is also referred to as Machine-to-Machine (M2M),
Skynet or Internet of Everything

Hassan 13
IoT Evolution

Hassan 14
A Gateway to the future!

Hassan 15
 IoT History

 In the late 1970s, systems for remotely monitoring meters on the electrical grid via
telephone lines were already in commercial use

 In the 1990s, advances in wireless technology allowed “machine–to–machine”

(M2M) enterprise and industrial solutions for equipment monitoring and operation
to become widespread. Many of these early M2M solutions, however, were based
on closed purpose–built networks and proprietary or industry-specific standards,
rather than on Internet Protocol (IP)–based networks and Internet standards
1. “Machine to Machine.” Wikipedia, https://en.wikipedia.org/wiki/Machine_to_machine
2. Polsonetti, Chantal. “Know the Difference Between IoT and M2M.” Automation World, July 15, 2014. http://www.automationworld.com/cloud-
computing/know-difference-between-iot-and-m2m

Hassan 16
 IoT History

 The first Internet “device”—an IP–enabled toaster that could be turned on and off
over the Internet—was featured at an Internet conference in 1990

 Over the next several years, other “things” were IP–enabled, including a soda
machine at Carnegie Mellon University in the US and a coffee pot in the Trojan
Room at the University of Cambridge in the UK (which remained Internet–
connected until 2001)
1. "The Internet Toaster." Living Internet, 7 Jan. 2000. Web. 06 Sept. 2015. http://www.livinginternet.com/i/ia_myths_toast.htm
2. "The "Only" Coke Machine on the Internet." Carnegie Mellon University Computer Science Department, n.d. Web. 06 Sept. 2015.
https://www.cs.cmu.edu/~coke/history_long.txt 18
3. Stafford-Fraser, Quentin. "The Trojan Room Coffee Pot." N.p., May 1995. Web. 06 Sept. 2015. http://www.cl.cam.ac.uk/coffee/qsf/coffee.html

Hassan 17
 IoT History

 The term “Internet of Things” (IoT) was first used in 1999 by British technology
pioneer Kevin Ashton to describe a system in which objects in the physical world
could be connected to the Internet by sensors

 Ashton was working on RFID (radio-frequency identification) devices, and the close
association of RFID and other sensor networks with the development of the IoT
concept is reflected in the name of the RFID device company that Ashton joined
later in his career: “ThingMagic.”

Hassan 18
Hassan 19
Applications of IoT

Hassan 21
 IoT use cases for smart cities

 Road traffic
 Smart parking
 Public transport
 Utilities
 Street lighting
 Waste management
 Environment
 Public safety
Hassan 22
IoT for the Elderly

 With a built-in accelerometer that

automatically detects falls
 Medication reminder
 With a GPS, which allows an
emergency operator to locate and
provide directions to the individual

Hassan 23
 HAPIfork

 The HAPIfork is an electronic

fork that helps you monitor
and track your eating habits

 It also alerts you with the

help of indicator lights and
gentle vibrations when you
are eating too fast http://www.hapi.com/products-hapifork.asp

Hassan 24
Self Driving Cars

Hassan 25
Smart Parking

Hassan 26
Sensors in even the holy cow!

In the world of IoT, even the cows will be connected

and monitored. Sensors are implanted in the ears of
cattle. This allows farmers to monitor cows’ health
and track their movements, ensuring a healthier, more
plentiful supply of milk and meat for people to
consume. On average, each cow generates about 200
MB of information per year

Hassan 27
 Intelligent Home

 Remote Monitoring
 Remote Controlling smart Devices

Hassan 28
 Internet of Battlefield Things

The Internet of Battlefield Things (IoBT) is a

project initiated and executed by the U.S.
Army Research Laboratory (ARL) that focuses
on IoT to enhance the capabilities of Army
soldiers. In 2017, ARL launched the Internet
of Battlefield Things Collaborative Research
Alliance (IoBT-CRA), establishing a working
collaboration between industry, university,
and Army researchers
Hassan 29
Hassan
Drivers of IoT Adoption

Hassan 31
 Driving Forces of IoT

 Sensor Technology – Tiny, Cheap, Variety

 Cheap Miniature Computers

 Low Power Connectivity

 Capable Mobile Devices

 Power of the Cloud

Hassan 32
 Driving Forces of IoT

Sensor Technology

Accelerometer Force Sensor Pulse Sensor Power Monitor

(4mm diameter) (0.1N – 10N)

Sensor Devices are widely available

Hassan 33
 Driving Forces of IoT

Cheap Mini Computers

Key Parameters

Flash: 8 Kbytes
Pin Count: 8
Max. Operating Freq: 20 MHz
CPU: 8-bit AVR
Max I/O Pins: 6
Ext Interrupts: 6
SPI: 1
Lily Tiny I2C: 1

Guess the Price?

Hassan 34
 Driving Forces of IoT

The Raspberry Pi

The Raspberry Pi, a computer far more

powerful than many IoT devices, is a
good candidate for IoT processing!

Hassan 35
 Driving Forces of IoT

Low Power Connectivity

Bluetooth Smart (4.0)

(Up to 2 years with a single
Coin-cell battery)

Hassan 36
 Driving Forces of IoT

Capable Mobile Devices

Quad Core 1.5 GHz

128 GB Internal Memory
3 GB RAM
16 MP Camera
2160p@30fps video
WiFI, GPS, BLE

Hassan 37
 Driving Forces of IoT

Power of the Cloud

Hassan 38
 ABCD’s of IoT
Applications Big Data Analytics

Connectivity and Communication Devices – that are smart!

Hassan 39
Thanks

Hassan