IoT Security

Web PKI at the Network Edge

Ben Kinsella, Advantech

Introduction

• Security is a major concern in Industrial IoT / Industry 4.0 / Industrial Control Systems.
• Poor security leads to compromised safety, equipment damage, reputational damage, failure to meet SLA commitments, legal liability, and reduced profits.

WebAccess/DMP

• Advantech's Device Management Portal
• WebAccess/DMP version 2 was re-designed from the ground-up to provide best-in-class security.

What is the "network"?

• IP?

What is the "edge"?

• Explain router
• Explain gateway
• Pulse oximeter example

Trust models

• Trust on first use (e.g. SSH). Doesn't scale
• Web of trust (e.g. PGP). Works well for people, not for things.
• Public Key Infrastructure (PKI)