IoT JNSA IoT Security WG IoT Security Working Group ( 2017123
JNSA IoT Security Working Group JNSA IoT Security Working Group IoT Copyright (c) 2017 NPO 2
JNSA IoT Security Working Group Copyright (c) 2017 NPO 3
JNSA IoT Security WG Copyright (c) 2017 NPO 4
IoT Security Working Group 2014/4 IoT IoT-A Project, IPA, ISACA, OWASP Raspberry Pi 2016/6 http://www.jnsa.org/result/iot/ Copyright (c) 2017 NPO 5
IoT Copyright (c) 2017 NPO 6
IoT IoT Copyright (c) 2017 NPO 7
IoT IT Copyright (c) 2017 NPO 8
( * 58.4% 88.3% PIN PIN/ SNS *25 Copyright (c) 2017 NPO 9
1.Internet of ThingsIoT 2.IoT ü IoT 3. IoT ü 4. IoT Copyright (c) 2017 NPO 10
1. Internet of ThingsIoT 1-1. 1-2.IoT 1-3.IoT 2. IoT のセキュリティの現状 2-1. セキュリティとプライバシー 2-2. デバイスとシステムのセキュリティ 2-2-1.IoT のセキュリティ ( 組込み系 ) 2-2-2.IoT のセキュリティ ( 無線系 ) 2-3.IoT のプライバシー 2-4. 誰でも作れる IoT Copyright (c) 2017 NPO 11
1 1-2.IoT IoT UI/UX Internet Copyright (c) 2017 NPO 12
IoT *IoT IoTIoT-A IEEEITUISO/IECOMG AllseenoneM2M WGIoTIoT IoT-A, Internet of Things - Architecture : http://www.iot-a.eu/public IEEE-SA, IoT Steering Committee : http://standards.ieee.org/innovate/iot/ IEEE P2413, Draft Standard for an Architectural Framework for the Internet of Things Working Group : http://standards.ieee.org/develop/project/2413.html ITU Joint Coordination Activity on IoT (JCA-IoT) : http://www.itu.int/en/itu-t/jca/iot/pages/default.aspx ISO/IEC: JTC1 SWG 5 Internet of Things(IoT) : http://www.iec.ch/dyn/www/f?p=103:14:0::::fsp_org_id,fsp_lang_id:10270,25?q=jtc1%20sc%2038 OMG : http://www.omg.org/hot-topics/iot-standards.htm Industrial Internet Consortium : http://www.industrialinternetconsortium.org/ onem2m : http://www.onem2m.org/ TTC: onem2m : http://www.ttc.or.jp/j/std/committee/wg/onem2m/onem2mtopics/20141212/ Allseen Alliance : https://allseenalliance.org Open Connectivity Foundation : http://openconnectivity.org Copyright (c) 2017 NPO 13
2 2-4. IoT IoT Copyright (c) 2017 NPO 14
IoT * 1.PiLCD Raspberry Pi 2 LCD 16x2 RGB-LED 付つまみ 2. GPIO 3. + + mpc/mpdxbmc OS 4. Copyright (c) 2017 NPO 15
IoT * Internet NAT iradi o A B D C Copyright (c) 2017 NPO 16
3. IoT 4. IoT Copyright (c) 2017 NPO 17
3 3. IoT IoT IoT Copyright (c) 2017 NPO 18
* Copyright (c) 2017 NPO 19
IPA IoT *http://www.ipa.go.jp/security/fy24/reports/emb_car/documents/ car_guide_24.pdf 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. DoS 11. 12. Copyright (c) 2017 NPO 20
4 IoT 125 GPS IoT N/A IoT N/A Copyright (c) 2017 NPO 21
Cloud, WAN, LAN Communicatio n I/F TCP/IP I/F Strage Program Memory Data Memory CPU User I/F User I/F Input User I/F Output Control I/F Sensing Input 操作 操作者確認 状態設定 情報入力 状態表示 メッセージ表示 問い合わせ センサー Control System I/F Clock Watch Dog Timer Actuate Output 制御対象 Control System Network Copyright (c) 2017 NPO 22
Copyright (c) 2017 NPO 23
1 IoT OFF IoT IoT IoT ID ON root Copyright (c) 2017 NPO - - 24
2 IoT N/A IoT IoT IoT IoTIoT IoT Firewall N/A Copyright (c) 2017 NPO N/A 25
3 IoT N/A Firewall Firewall Firewall IoT ID Copyright (c) 2017 NPO ID 26
4DoS OFF NFC(RFID) ON DoS IoT SYN UDP DoSI/F DoS N/A N/A 27 Copyright (c) 2017 NPO 27
5 IoT N/A IoT IoT Copyright (c) 2017 NPO 28
4. IoT IoT IoT Copyright (c) 2017 NPO 29
IoT 4 43 IoTIoT 1. 2. 3. Copyright (c) 2017 NPO 30
Copyright (c) 2017 NPO 31
IoT IoT IoT 4 JNSA IoT Security WG Copyright (c) 2017 NPO 32
IoT 2017/3/113:0017:00 office@jnsa.org Copyright (c) 2017 NPO 33
ガイド作成メンバー : JPCERT IBM SCSK JPCERT * Copyright (c) 2017 NPO 34
NPO 日本ネットワークセキュリティ協会事務局 sec@jnsa.org Copyright (c) 2017 NPO 35