hello
my name is kier henderson i'm a doctor
of engineering candidate in the
electrical and computer engineering
department at marcus state university
underneath my advisor of dr kevin
cornigay today
i will be presenting our work on
improving system architectures
that secure our nation's critical
infrastructures
the major topic of my talk is how we can
improve network security and privacy due
to the proliferation of the internet of
things or iot
it is estimated that around 31 billion
iot devices will be deployed
by the end of the year an increase from
7 billion in 2018
the current market cap shows a large
portion of iot in many critical sectors
many that are already improperly managed
there are several recent high-profile
attacks that have resulted due to the
proliferation of the iot
nation states are already utilizing
these vulnerabilities and attacks can
range from manipulating a single
insecure device
or utilizing tens of millions of them
one of the major issues we see with
networks today is that they largely rely
on secure authentication
which is important but leaves much
oversight next we see that device
manufacturers assume that users will
actually change their default password
on their devices and not open their
ports to the public
outdated access policy models that were
designed for general purpose devices
don't work well for very
behavior-specific devices such as in iot
and access policies are also difficult
to implement due to the design flow of
network management
scaling networks are the size of iot
networks can be difficult
this leads us to the question of what
can we do to work towards a better
solutions
our research leverages a newly accepted
ietf standard called manufacturer
youtube description or mud
that automates the access policy of any
network-connected devices
based on its intended behavior and
emitted identity
but what happens when we don't know what
the device is because it isn't
broadcasting
either due to being a legacy device or
device manufactured before the standard
mud doesn't account for this behavior
but not architecture we designed a
legacy process to apply device-specific
access policy by creating an
identification model that utilizes
methods that actively and passively
fingerprint the device
creating an identity model that can be
used to link the device with an
appropriate behavior profile
in order to enforce and apply its access
control policy
in order to manage the network we
utilize software defined network
and open flow this network design can
replace or add on to current network
setups
the control server can even be moved to
the cloud and manage a
network of networks the same way that
enterprise networks do
what this looks like an iot device
connects
we identify the device the model in the
firmware version and then set the
behavior profile that
permits access only to require data
flows and we repeat for all devices on
the network
as a result of these improvements we
have a sustainable security architecture
the ability to proliferate as quickly as
internet of things
a method that accounts for legacy and
non-compliant devices
an automated flow that reduces user
error improved access controls that
provide much needed defense in depth
and lastly the architecture is open
source and an industry standard giving
the architecture more traction to
provide
physical results in order for this to
work
shouldn't truly be a viable solution we
need to continue to work towards a
completely operational hardware and
software solutions
as well as collaborate to create a
database that encapsulates our iot
environment and their behavior
i'm open to any questions or feedback
about this architecture
and if you want to hear more about any
research done at the cap center or
morgan state university please reach out
to me
thank you for your time and interest