The Internet of Things is not as complex as one would think. Objects(e.g. Power meters, Fridge computers, etc.) or "Things" don;t have their own Internet, instead they "speak" to each other over the same Internet we all use. There lies their vulnerability. Assuming that since the machines will only talk to each other, that no one will eavesdrop or intrude on their conversation. Security researchers have a saying, "Security through Obscurity is no Security".
The presentation shows how the Internet of Things' veil of obscurity can be pierced by an attacker(or more likely a Security Researcher) would assess a particular Smart Parking Meter ecosystem. Only open source intelligence(OSINT)[e.g. patents, newspaper articles] was used to compile the information on:
* parking meters
* mesh networking
* machine2machine(m2m) SIMs
* management consoles
* RF usage
1 of 24
Downloaded 13 times
More Related Content
Solar Powered Parking Meters - An IoT thought experiment
1. LA2600
Solar Powered Parking Meters
LA2600.org
An IoT thought experiment
Jimmy Shah
Credit:PR NEWSWIRE
2. LA2600
Solar Powered Parking Meters
LA2600.org
Cost, Profit
$495/meter
10K meters/$230,000 in additional net revenue
Power
a battery pack that lasts approximately 2 to 3 years
panels are the primary source of energy for the
batteries. There are back-up sources in the event
something happens to the panels
3. LA2600
LA2600.org
Meter Locations
Location
Multi-view
Like Google maps
Street view
Satellite View
Status of meters
amount of money collected in the cash box
Broken, CC reader jam, etc.
6. LA2600
LA2600.org
Monthly Statistics
cash amounts
credit amounts
total revenue,
number of transactions
cash per meter (listed as pole)
credit per meter
10. LA2600
LA2600.org
CC Transactions
transaction date
transaction reference number
machine reference
last four digits of credit card
card scheme and transaction amount
12. LA2600
LA2600.org
Coin Collection
the person collecting the currency inserts an
identification card into the meter [] to signal to the
meter [...] that the cash box is being emptied
15. LA2600
LA2600.org
Battery Voltage
The voltage level is used to indicate the health of the
battery.
Voltage drop = Replace battery
"The solar panels on the back of the meters are the
main source of power, with support from a backup
battery."
a battery pack that lasts approximately 2 to 3 years.
17. LA2600
LA2600.org
Terminal Events
Mainly
coin path blockages
jammed credit card readers
Potentially
alert law enforcement officers to better monitor the
problem areas to reduce vandalism
23. LA2600
LA2600.org
Patents
PARKING METER AND A DEVICE THEREFOR USA (Pub. number - US
2009/0159674 A1)
http://www.google.com/patents/about?id=SwbIAAAAEBAJ
A PARKING METER AND A DEVICE THEREFOR International (Pub. number-
WO/2007/063530)
http://www.wipo.int/pctdb/en/wo.jsp?wo=2007063530
METHOD AND APPARATUS FOR OPERATING A REMOVABLE METER UNIT
USA (Pub. number - US 2009/0192950 A1)
http://www.google.com/patents/about?id=JHzIAAAAEBAJ
METHOD AND APPARATUS FOR AUTOMATIC LOCATION-SPECIFIC
CONFIGURATION MANAGEMENT OF A REMOVABLE METER UNIT USA
(Pub. number - US 2009/0183966 A1)
http://www.google.com/patents/about?id=tlDIAAAAEBAJ
24. LA2600
LA2600.org
References
Parking meters take credit cards, use solar power
http://articles.latimes.com/2007/jun/29/local/me-meters29
High-tech parking meters a hit with city and users
http://www.sdnn.com/sandiego/2010-02-16/business-real-estate/high-tech-parking-meters-a-hit-with-city-and-users
Solar Powered Parking Meters-Money in the Bank for Los Angeles
http://www.solarpowerbuzzmedia.com/2010/10/solar-powered-parking-meters-money-in.html
Sun-powered parking meters the ticket for saving money
http://www.cleanenergyauthority.com/solar-energy-news/solar-powered-parking-meters-102210/