The internet of risky things : trusting the devices that surround us / Sean Smith.

Format:

Book

Author/Creator:

Smith, Sean, author.

Language:

English

Subjects (All):

Internet of things.

Physical Description:

1 online resource (240 pages) : illustrations

Edition:

First edition.

Place of Publication:

Beijing : O'Reilly, 2017.

System Details:

text file

Summary:

By 2020, the Internet of Things (IoT) will consist of millions of computational devices intimately connected to real-world aspects of human life. In this insightful book, Professor Sean Smith, who worked in information security long before the web appeared, explains that if we build the IoT the way we built the current internet and other information technology initiatives, we’re headed for trouble. With a focus on concrete solutions, The Internet of Risky Things explains how we can avoid simple flaws that have plagued several dramatic IT advances in recent decades. Developers, engineers, industrial designers, makers, and researchers will explore "design patterns of insecurities" and learn what’s required to route around or fix them in the nascent IoT. Examine bugs that plague large-scale systems, including integer overflow, race conditions, and memory corruption Look at successful and disastrous examples of previous quantum leaps in health IT, the smart grid, and autonomous vehicles Explore patterns in coding, authentication, and cryptography that led to insecurity Learn how blunders that led to spectacular IT disasters could have been avoided

Contents:

Copyright; Table of Contents; Preface; O'Reilly Safari; How to Contact Us; Acknowledgments; Chapter 1. Brave New Internet; Worst-Case Scenarios: Cyber Love Canal; What's Different?; Lifetimes; The IoT in the Physical World; Inevitable and Unfortunate Decay; Zero-Days and Forever-Days; The Fix is In?; The IoT's Impact on the Physical World; Houses; Cars; Traffic; Airplanes; Infrastructure; Medicine; The Physical World's Impact on the IoT; Missing Things; Large Attack Surface; Jumping Across Boundaries; Worst-Case Scenarios: Cyber Pearl Harbor; Targeted Malicious Attacks in the IoT

Where to Go NextWhat Do We Do?; What Comes Next; Works Cited; Chapter 2. Examples and Building Blocks; Computing Devices; Basic Elements; Moore's Law; How IoT Systems Differ; Architectures for an IoT; Connection to Other Computers; Connection to the Physical World; The Backend; The Bigger Picture; What's Next; Works Cited; Chapter 3. The Future Has Been Here Before; Bug Background; Integer Overflow; Race Conditions; Memory Corruption; Impossible Scenarios; Smart Health IT; The Therac-25; The Sad Story; Today; Past and Future; Smart Grid; The Balancing Act; Lights Out in 2003; Root Causes

TodayPast and Future; Smart Vehicles; The Dawn of Fly-by-Wire; Fear of the A320; What Happened Next; Past and Future; Today; Not Repeating Past Mistakes; Works Cited; Chapter 4. Overcoming Design Patterns for Insecurity; Anti-Pattern: Doing Too Much; Instance: Failure of Input Validation; Instance: Excess Power; Instance: Differential Parsing; Anti-Pattern: Coding Blunders; Anti-Pattern: Authentication Blunders; Instance: No Authentication; Instance: Default Credentials; Instance: Permanent Credentials; Instance: No Delegation; Instance: Easy Exposure; Moving Forward

Anti-Pattern: Cryptography BlundersInstance: Bad Randomness; Instance: Common Keys; Instance: Bad PKI; Instance: Aging of Cryptography and Protocols; A Better Future; Works Cited; Chapter 5. Names and Identity in the IoT; Who Is That, Really?; Beyond Bits; Authorization; The Standard Cryptographic Toolkit; The Somewhat Impossible; Symmetric Cryptography; Public Key Cryptography; Public Key Infrastructure; Cryptographic Hashing; The Price Tag; The Newer Toolkit; Macaroons; Blockchains; PUFs; Addresses and Names; IoT Challenges; Ontologies of Association; Ontologies of Interaction

PKI and Large PopulationsConstrained Devices and Channels; Privacy Side Effects; Cryptographic Decay; Moving Forward; Works Cited; Chapter 6. The Internet of Tattletale Devices; Cautionary Tales; IoC Privacy Spills; IoT Privacy Worries; When Things Betray Their Owners; Your Things May Talk to Police; Your Things May Phone Home; Your Things May Talk to the Wrong People; Emerging Infrastructure for Spying; Wearables and Health; Internet of Big Brother's Things; Getting What We Want; Saying What We Want; Law and Standards; Technological Enforcement; Works Cited

Notes:

Includes bibliographical references and index.

Description based on online resource; title from PDF title page (ebrary, viewed February 1, 2017).

ISBN:

9781491963586

1491963581

9781491963616

1491963611

9781491963623

149196362X

OCLC:

970351715