layout: true name: inverse class: center, middle, inverse layout: true .header[.floatleft[A tour of the Internet of Things].floatright[Christopher Biggs, .logo[Accelerando Consulting]]] .footer[.floatleft[Redlands Innovation Workshop, Nov 2019]] --- layout: true name: callout class: center, middle, italic, bulletul .header[.floatleft[A tour of the Internet of Things].floatright[Christopher Biggs, .logo[Accelerando Consulting]]] .footer[.floatleft[Redlands Innovation Workshop, Nov 2019]] --- layout: true template: callout .header[.floatleft[A tour of the Internet of Things].floatright[Christopher Biggs, .logo[Accelerando Consulting]]] .footer[.floatleft[Redlands Innovation Workshop, Nov 2019]] --- class: center, middle template: inverse # A Tour of the Internet of Things ## What, Why, How .bottom.right[ Christopher Biggs, .logo[Accelerando Consulting] <br>.logo[@accelerando_au] ] ??? G'day folks, I'm Christopher Biggs. I've been involved with electronic gadgets since I was a teenager, and throughout 25 years as a software engineer, architect and manager. I operate Accelerando Consulting which helps businesses use technology to reduce stress. Really, that's what I believe, that technology is the gradual process of freeing humanity from drudgery and fear, and I started Accelerando because I wanted to contribute to a future that I will be excited to live in. --- template: inverse # What is "The Internet Of Things" (IoT) --- layout: true template: callout .crumb[ # Definitions ] --- # .orange[network] - A collection of computers able to communicate with each other, sharing a common authority. --- # .orange[internet] - A network of networks, not necessarily under the same authority. --- # .red[The Internet] - The global sum of all computers that are interested in communicating with each other. --- # .blue[The World Wide Web] - The part of the Internet that people see --- # .green[The Internet of Things] - Networked computers that you don't see. --- # IoT - The 5th Age of computing ## (I) Dawn of computing: 1 computer per company --- # IoT - The 5th Age of computing ## (II) Desktop Era: 1 computer per person --- # IoT - The 5th Age of computing ## (III) Mobile Age: ~5 computers per person --- # IoT - The 5th Age of computing ## (IV) The Cloud: Who even counts any more? --- # IoT - The 5th Age of computing ## (V) The Internet of Things: *Everything* is a computer. ### (Hundreds, or thousands, per person.) --- layout: true template: callout .crumb[ # Definitions # Applications ] --- template: inverse # Laziness as a Service ## .green[Applications of the Internet of Things] --- # Applications .leftish.arrow.tight[ #### Vision #### Reach #### Autonomy #### Efficiency #### Insight ] --- # 1. Vision ## (Monitoring / Alerting) .leftish.arrow.tight[ #### Environment (temp, humidity, rainfall etc) #### Resource consumption #### Security #### Product quality #### Inventory management ] --- # 2. Reach ## (Remote control) .leftish.tight.arrow[ #### Household and workplace lighting, ventilation #### Appliances #### Security and access control #### Irrigation #### Livestock & Pet care ] --- # 3. Autonomy .leftish.tight.arrow[ #### Autonomous vehicles #### Predictive maintenance #### Safety aids #### Cleanliness ] --- # 4. Efficiency .leftish.tight.arrow[ #### Adaptive congestion control #### Presence-aware lighting and ventilation #### Awareness of resource consumption #### Green energy monitoring #### On-demand irrigation #### Adaptive refuse management ] --- # 5. Insight .leftish.tight.arrow[ #### Business insights from customer behaviour #### Component lifetime optimisation ] --- layout: true template: callout .crumb[ # Definitions # Applications # Technology # Risks ] --- class: center, middle template: inverse # How to Thing --- # What's in the box .leftish.arrow[ #### Ludicrously inexpensive computers #### Pervasice wireless communications #### A toolbox of "Cloud Computing" services ] --- # How cheap? .leftish.arrow[ #### Traditional "industrial automation sensors" - $2000 a pop #### "Commercial grade devices" - $500-$1000 #### IoT - $50 and under ] --- # Look, no wires ## but... .leftish.arrow[ #### How to eat? #### How to talk? ] --- # Low power .leftish.arrow[ #### Run off a USB power source #### Battery - 1-5y lifetime #### Solar, outdoors or in #### Energy harvesting from motion or radio ] --- # Communications everywhere .leftish.arrow[ #### WiFi is everywhere, but eats battery #### Bluetooth is low power, but range around 10m #### Meshes can extend bluetooth campus-wide #### LoRa - long range low power (10km, 10y battery, free) #### Low-power 4G/5G - $1/mo ] --- # Cloud services ## Somebody else's computer .leftish.arrow[ #### Fleet management and security #### Behaviour composition #### Dashboarding and visualisation ] --- class: center, middle template: inverse # The Internet of .red[Insecure] Things? ## .green[Risks of poor quality devices] ??? A lot of press about the internet of things just wails that everything in IoT is awful. Well actually everything *is* awful, but in my opinion none of the current problems are insoluble, nor even particularly unique to the Internet of Things. I happen to think that the current situation in IoT is akin to the American Wild West era - we have a time of rapid growth where innovation is running ahead of common sense and the law. But there are some risks from adopting IoT without due care. Late last year one of these risks was thrust to our attention when major social media sites were brought down by a denial of service attack perpetrated by a botnet of compromised video cameras. --- layout: true template: callout .crumb[ # Definitions # Applications # Technology # Risks ] --- ## What Risks do IoT devices present? .left.autodim.vtight[ #### "Mummy, why are you on YouTube .pink[in the Nude]?" * Unauthorised **retrieval** of information from your devices * Targeted intrusion (papparazi, neighbours, stalkers) * Government surveillance (it's already happenning) * Indiscriminate harvesting of images/video/audio * Drive-by pervs * Always-on microphones/cameras ] ??? So our first risk is unauthorised access to your devices. If the device is a video camera it's pretty clear what the concern is here. Embarrassment, violation, blackmail, burglary. The threats vary by who the perpetrators might be. First you may have to worry about people who have a malicious interest in you in particular. If you're a celebrity, or you have a vindictive ex or a creepy stalker you have a risk of a targeted persistent threat. Second, much like we're seeing ransomware go wild in the PC world, I wouldn't be surprised to see malware attempting to harvest video and then blackmail the subjects. Finally there's mass data collection, either by randos driving around sniffing for vulnerable devices, or by state level actors. We know from leaks that certain intelligence agencies have developed the ability to insert spyware into smart TVs. Last week Amazon launched a version of their Echo device with a video camera, that can objectively tell you whether or not your bum looks big in that. I'm not at all confident putting a video camera in everyones bedroom is a wise move. --- ## What Risks do IoT devices present? .left.autodim.vtight[ #### "Mummy, why are you on YouTube in the Nude?" #### "Hey, who turned out the .yellow[lights]?" * Unauthorised **control** of your devices * Quadcopters broadcasting "lights out" * Vandals/Extortion/Terrorists * Smart meters compromised, for your cost (or benefit) * Medical device tampering * Theft of service/property ] ??? Our next risk is unauthorised control of your devices. A prank was done recently where some folks managed to turn off a particular brand of home lighting by flying a quadcopter around a neighbourhood. You can bet someone's working on the same trick for your front door. Vandalism is an issue too. I don't want to see someone work out how to wreck every garage door opener in the city, or switch off all pacemakers in the room. A few years back the electric power authority in Puerto Rico was estimated to be losing four hundred million dollars a year because an insider leaked how to reprogram electricity meters by shining infrared light through the casing, completely undetectable. It wouldn't be funny if somebody worked out how to shut down air conditioners in the middle of a heatwave. --- ## What Risks do IoT devices present? .left.autodim.vtight[ #### "Mummy, why are you on YouTube in the Nude?" #### "Hey, who turned out the lights?" #### "Hey, who turned out the .purple[entire Internet?]" * **Mass takeover** of devices * Distributed Denial-of-Service attacks * Theft of resources * Spam (email, web, audio, video, app) ] ??? The risk we saw happen last year is mass takeover of devices. In that case hundreds of thousands of internet connected security cameras were infected by a worm named Mirai, which used them to perpetrate a DDoS against a major DNS provider. Since that time we've seen even more malicious descendents of Mirai in the wild. What if your TV started showing advertisements that you couldn't turn off, or your lights start strobing on and off at random until you pay a ransom to make them stop. --- ## What Risks do IoT devices present? .left.autodim.vtight[ #### "Mummy, why are you on YouTube in the Nude?" #### "Hey, who turned out the lights?" #### "Hey, who turned out the entire Internet?" #### "What do you *mean* they're .red[Inside the Room]?" * IoT devices can be the mole inside your network * Corporate espionage * Identity theft * Firewalls are less effective * Malicious/compromised cloud actors ] ??? And of course there's plain old network intrusion. Most networks are set up to defend from outside threats, but what if you just brought a threat into the building. Most firewalls aren't good enough to prevent a device from tunneling traffic to the outside. In home networks devices can just use universal plug and play to tell the firewall to forward traffic right to them. You need to stop thinking of firewalls as dividing the scary internet from the safe lan. The monsters are inside the room. And if IoT devices rely on cloud services, then there's the risk of that service being compromised, and I'll give a scary example of that later. --- ## What Risks do IoT devices present? .left.autodim.vtight[ #### "Mummy, why are you on YouTube in the Nude?" #### "Hey, who turned out the lights?" #### "Hey, who turned out the entire Internet?" #### "What do you mean they're Inside the Room?" #### "I wish I could just go back to the .blue[Ocean]!" * Management can be tedious and repetitive * Finicky set-up process * Junkware mobile apps * No tools to help with updates * No process to alert users to bugs ] --- layout: true template: callout .crumb[ # Definitions # Applications # Technology # Risks # Precautions ] --- # Mitigating the risks of shonky IoT .leftish.vtight.arrow[ #### Choose with care and ditch junky items #### Use a separate Wifi Network (or guest network) #### Turn off "universal plug and play" #### Use data limits #### Prefer items with support for industry frameworks #### Take a network census with the .teal[Fing] mobile app ] --- template: inverse # "When everything is a computer, either everybody is a System Administrator, or nobody is." ??? There are three areas where Accelerando provides expertise. We've covered the first which is selecting, or creating devices. The second is provisioning and managing your devices. --- layout: true template: callout .crumb[ # Definitions # Applications # Technology # Risks # Precautions # Management ] --- # Considerations when leading the herd .leftish.arrow[ #### Provisioning a fleet of devices #### Maintaining security and rolling out updates #### Monitoring status and reliability #### Avoiding lock-in ] --- # Frameworks to help .leftish.arrow[ #### AWS IoT #### Google IoT #### Microsoft Azure #### Balena #### mDash ] --- # Web and mobile dashboards .leftish.arrow[ #### Central control panels #### Bring together status at a glance #### Mobile apps and alerts ] --- layout: true template: callout .crumb[ # Definitions # Applications # Technology # Risks # Precautions # Management # Insight ] --- # Business Intelligence .leftish.arrow[ #### Cloud data warehousing #### Explore trends and correlations #### Agile Marketing - Hypothesise, Test, Iterate ] --- layout: true template: callout .crumb[ # Definitions # Applications # Technology # Risks # Precautions # Management # Insight # Coda ] --- .fig30[  ] # Recap .nolm.vtight[ * All the computers you don't see * Extend your vision * Extend your reach * Improve processes * Support decisions * There are some risks * A puppy is not just for Christmas * Know what you measure and why ] --- # Resources, Questions ## Related talks - [http://christopher.biggs.id.au/#talks](http://christopher.biggs.id.au/#talks) - Email: .blue[christopher @ accelerando.com.au] - Twitter: .blue[@unixbigot] - BNE IoT Meetup: .blue[@iotbne] or search on .blue[meetup.com] - Accelerando Consulting - IoT, DevOps, Big Data - .blue[@accelerando_au] https://accelerando.com.au/ ]