Software is Vital. Secure Software Engineering for the Age of Smart Cities. OPEN

Transcription

1 Software is Vital Secure Software Engineering for the Age of Smart Cities

2 Group GROUND AEROSPACE SPACE TRANSPORTATIO DEFENSE SECURITY N TRUSTED PARTNER FOR A SAFER WORLD Wherever safety and security are critical, Thales delivers. Together, we innovate with our customers to build smarter solutions. Everywhere. 2

3 Thales e-security Our track record. Over 40 years of leadership delivering data protection solutions around the world Our customers. We secure some of the world s most valuable information and > 80% of payment transactions Our commitment. Hundreds of R&D staff dedicated to excellence in applied cryptography Our certifications. All our offerings are independently security certified - more than anyone else! Our support services. Our Advanced Solutions Group (ASG) provides world-class consulting, training, and deployment assistance Hardware Security Modules Key management systems Network encryption Signing and time stamping Banking Government Utilities High Tech Mobile 3

4 About your speaker Chief Technology Officer at Thales e-security Career in security at many scales ncipher (Lead Architect, Director Technical Strategy) - And founder of OASIS KMIP ARM (Director of Technology, Secure Services Division) - And Board Director at GlobalPlatform Trustonic (Chief Technology Officer) - And Chair of GlobalPlatform Security Task Force Thales e-security (Chief Technology Officer) Planes, trains and automobiles. And smart phones. And credit cards 4

5 So why are we here? 5

6 So why are we here? 6

7 So why are we here? 7

8 Smart Cities 8

9 Smart cities a mainstream idea 9

10 Smart cities a mainstream idea 10

11 Smart cities a mainstream idea 11

12 Smart cities a mainstream idea 12

13 Smart cities not ambitious enough? 13

14 Smart cities not ambitious enough? 14

15 Smart Cities Connected Living but how will we get there? 15

16 Smart Cities Connected Living but how will we get there? 16

17 Smart Cities Connected Living but how will we get there? 17

18 Smart Cities Connected Living but how will we get there? 18

19 What about Cloud? Image Author=Brian Solis, License=Creative Commons Attribution 2.0 Generic 19

20 What about Cloud? Six decades into the computer revolution, four decades since the invention of the microprocessor, and two decades into the rise of the modern Internet, all of the technology required to transform industries through software finally works and can be widely delivered at global scale. In short, software is eating the world. Image Author=Brian Solis, License=Creative Commons Attribution 2.0 Generic 20

21 What could possibly go wrong? 21

22 The Internet of Things A new model economy 22

23 Connected Home 23

24 Connected Home 24

25 IoT 25

26 IoT Image Wikimedia Commons, verified copyright free 26

27 The Internet of Bad Things Wikimedia commons / Markus Kuhn As the devices around us become smarter they will become less loyal, and it s not just about malware (whether written by cops or crooks). We can expect all kinds of novel business models, many of them exploitative, as well as some downright dishonesty 27

28 That s all very well in the home, but Image Author=Bell Telecom, License=Creative Commons Attribution-Share Alike 3.0 Unported 28

29 That s all very well in the office, but 29

30 Worlds collide Software is everything 30

31 Worlds merge 31

32 Cloud residue. It s raining Data. 32

33 33

34 A critical problem for Smart Cities 34

35 A critical problem for Smart Cities 35

36 A critical problem for Smart Cities 36

37 Data is EVERYTHING is Data 37

38 Accidental Problems 38

39 Accidental Problems Over-reuse 39

40 Remember this? Six decades into the computer revolution, four decades since the invention of the microprocessor, and two decades into the rise of the modern Internet, all of the technology required to transform industries through software finally works and can be widely delivered at global scale. In short, software is eating the world. Image Author=Brian Solis, License=Creative Commons Attribution 2.0 Generic 40

41 Remember this? Six decades into the computer revolution, four decades since the invention of the microprocessor, and two decades into the rise of the modern Internet, all of the technology required to transform industries through software finally works and can be widely delivered at global scale. In short, software is eating the world. Image Author=Brian Solis, License=Creative Commons Attribution 2.0 Generic 41

42 Diversity Image Author=Darkone, License=Creative Commons Attribution-Share Alike 2.5 Generic 42

43 Diversity #! Image Author=Darkone, License=Creative Commons Attribution-Share Alike 2.5 Generic 43

44 That s all very well in the cloud, but 44

45 That s all very well in the cloud, but Both Uber and Volvo will use the same base vehicle for the next stage of their autonomous vehicle strategies This will involve Uber adding its own self-developed autonomous driving systems to the Volvo base vehicle 45

46 That s all very well in the cloud, but 46

47 The danger It s somebody else s problem Thales 47

48 The danger It s somebody else s problem Thales 48

49 Not Accidental Problems 49

50 Not Accidental Problems Malign intent 50

51 Unintended consequences 51

52 Remember this? Wikimedia commons / Markus Kuhn As the devices around us become smarter they will become less loyal, and it s not just about malware (whether written by cops or crooks). We can expect all kinds of novel business models, many of them exploitative, as well as some downright dishonesty 52

53 Remember this? Wikimedia commons / Markus Kuhn As the devices around us become smarter they will become less loyal, and it s not just about malware (whether written by cops or crooks). We can expect all kinds of novel business models, many of them exploitative, as well as some downright dishonesty 53

54 Not Accidental Problems Un-aligned intent 54

55 Remember this? Wikimedia commons / Markus Kuhn As the devices around us become smarter they will become less loyal, and it s not just about malware (whether written by cops or crooks). We can expect all kinds of novel business models, many of them exploitative, as well as some downright dishonesty 55

56 Remember this? Wikimedia commons / Markus Kuhn As the devices around us become smarter they will become less loyal, and it s not just about malware (whether written by cops or crooks). We can expect all kinds of novel business models, many of them exploitative, as well as some downright dishonesty 56

57 Hard Problems 57

58 Hard Problems Cryptography 58

59 Cryptography is Hard Alice & Bob 59

60 Cryptography is Hard Alice & Bob if only it were this simple 60

61 Hard Problems Available expertise 61

62 Life at the cutting edge 10:000 62

63 Hard Problems Reliability and Durability 63

64 How long is a lifetime? Image Author=S_Sepp, License=Creative Commons Attribution-Share Alike 3.0 Unported 64

65 What can we do? 65

66 Why don t we just write better code? XKCD.com 66

67 Developing areas that will help Think like an attacker! Software has to work in adverse conditions, not just ideal ones The cloud can help Concentrating expertise where it s needed Population level analytics Being online can move the hard parts of protocols around Isolation technologies Software and hardware Software quality tools If they are used properly! Simulation needs to catch up More sophisticated security standards Common Criteria itc? Regulation Money talks 67

68 Because this is the world we want 68

69 not this one! Thales 69

70 Questions? 70