Press "Enter" to skip to content

How dangerous are IOT devices? | Yuval Elovici | TEDxBGU


[Music]

[Music] did we do this morning I woke up and

did we do this morning I woke up and

did we do this morning I woke up and went to my morning run using my smart

went to my morning run using my smart

went to my morning run using my smart watch this watch what is really amazing

watch this watch what is really amazing

watch this watch what is really amazing it collects a lot of information about

it collects a lot of information about

it collects a lot of information about me about my speed of running about the

me about my speed of running about the

me about my speed of running about the distance even my heart rate and

distance even my heart rate and

distance even my heart rate and immediately when I arrived home I can

immediately when I arrived home I can

immediately when I arrived home I can see that all the information is already

see that all the information is already

see that all the information is already stored in the cloud and even it can

stored in the cloud and even it can

stored in the cloud and even it can measure my stress level

measure my stress level

measure my stress level let’s see now it’s 90 I have another 10

let’s see now it’s 90 I have another 10

let’s see now it’s 90 I have another 10 to go with lists while standing next

to go with lists while standing next

to go with lists while standing next when I finish to make a bathroom I go to

when I finish to make a bathroom I go to

when I finish to make a bathroom I go to my work using my connected car oh how

my work using my connected car oh how

my work using my connected car oh how come my car is already connected I’m

come my car is already connected I’m

come my car is already connected I’m using Waze in my car and this way it’s

using Waze in my car and this way it’s

using Waze in my car and this way it’s connected to the Internet in the future

connected to the Internet in the future

connected to the Internet in the future every car is going to be connected to

every car is going to be connected to

every car is going to be connected to the Internet and it’s going to be part

the Internet and it’s going to be part

the Internet and it’s going to be part of the IOT revolution today the cars are

of the IOT revolution today the cars are

of the IOT revolution today the cars are connected because of the application

connected because of the application

connected because of the application that we are having inside our car but in

that we are having inside our car but in

that we are having inside our car but in the future cars are going to be fully

the future cars are going to be fully

the future cars are going to be fully connected and are going to be even

connected and are going to be even

connected and are going to be even autonomous then when I reach to my

autonomous then when I reach to my

autonomous then when I reach to my office usually I like to play with the

office usually I like to play with the

office usually I like to play with the latest gadget you know when you are

latest gadget you know when you are

latest gadget you know when you are doing a lot of research in the domain of

doing a lot of research in the domain of

doing a lot of research in the domain of IOT you can play a lot with this IOT

IOT you can play a lot with this IOT

IOT you can play a lot with this IOT devices so you are buying many IOT

devices so you are buying many IOT

devices so you are buying many IOT devices one of them is the Google glass

devices one of them is the Google glass

devices one of them is the Google glass you see even a glass started to become

you see even a glass started to become

you see even a glass started to become smart and this smart Google glass what

smart and this smart Google glass what

smart and this smart Google glass what we can do with them we can actually

we can do with them we can actually

we can do with them we can actually navigate the internet and see many

navigate the internet and see many

navigate the internet and see many things there is a small display and a

things there is a small display and a

things there is a small display and a camera and in the future such glasses

camera and in the future such glasses

camera and in the future such glasses will even be able to tell us if somebody

will even be able to tell us if somebody

will even be able to tell us if somebody in front of us is lying or not and then

in front of us is lying or not and then

in front of us is lying or not and then when I’m coming home I’m going ability

when I’m coming home I’m going ability

when I’m coming home I’m going ability to my smart fridge to grab something

to my smart fridge to grab something

to my smart fridge to grab something from the fridge this fridge is smarter

from the fridge this fridge is smarter

from the fridge this fridge is smarter why it’s smarter it’s includes a very

why it’s smarter it’s includes a very

why it’s smarter it’s includes a very very nice display

very nice display

very nice display via this display I can order groceries

via this display I can order groceries

via this display I can order groceries and in addition it has a very nice

and in addition it has a very nice

and in addition it has a very nice dashboard where my wife can remain put

dashboard where my wife can remain put

dashboard where my wife can remain put me all the tasks that to live during

me all the tasks that to live during

me all the tasks that to live during this day then I have to play with my

this day then I have to play with my

this day then I have to play with my letters drawn at home in the evening

letters drawn at home in the evening

letters drawn at home in the evening this drone is really amazing you can

this drone is really amazing you can

this drone is really amazing you can take lot of photos with it it’s also

take lot of photos with it it’s also

take lot of photos with it it’s also connected to the Internet via the mobile

connected to the Internet via the mobile

connected to the Internet via the mobile phone in the futures dawn are going to

phone in the futures dawn are going to

phone in the futures dawn are going to be completely autonomous and are going

be completely autonomous and are going

be completely autonomous and are going to bring us groceries to our house in

to bring us groceries to our house in

to bring us groceries to our house in the late evening I like to go to watch

the late evening I like to go to watch

the late evening I like to go to watch movies in my smart TV this Smart TV is

movies in my smart TV this Smart TV is

movies in my smart TV this Smart TV is also connected to the Internet and

also connected to the Internet and

also connected to the Internet and allows me to access to many many content

allows me to access to many many content

allows me to access to many many content providers and get a lot of free

providers and get a lot of free

providers and get a lot of free interesting videos and content in the

interesting videos and content in the

interesting videos and content in the future this our TVs will know

future this our TVs will know

future this our TVs will know automatically what we supposed to watch

automatically what we supposed to watch

automatically what we supposed to watch what really interests us all these

what really interests us all these

what really interests us all these things that I described to you are

things that I described to you are

things that I described to you are actually part of the Internet of Things

actually part of the Internet of Things

actually part of the Internet of Things revolution

revolution

revolution these are a loti that are interacting

these are a loti that are interacting

these are a loti that are interacting they with them

they with them

they with them and in the future we are going to do

and in the future we are going to do

and in the future we are going to do even more so as you saw many devices

even more so as you saw many devices

even more so as you saw many devices that we are using today are going to

that we are using today are going to

that we are using today are going to become connected to the Internet and I’m

become connected to the Internet and I’m

become connected to the Internet and I’m going to provide us much better services

going to provide us much better services

going to provide us much better services why ayat is is so important mainly

why ayat is is so important mainly

why ayat is is so important mainly because in the past for example we had a

because in the past for example we had a

because in the past for example we had a heart rate monitor the heart rate

heart rate monitor the heart rate

heart rate monitor the heart rate monitor could collect information about

monitor could collect information about

monitor could collect information about our heart status and then to provide us

our heart status and then to provide us

our heart status and then to provide us a prognosis about what is the status of

a prognosis about what is the status of

a prognosis about what is the status of our heart in the future it’s going to be

our heart in the future it’s going to be

our heart in the future it’s going to be a IOT heart rate monitor that is going

a IOT heart rate monitor that is going

a IOT heart rate monitor that is going to collect a lot of information about

to collect a lot of information about

to collect a lot of information about our heart is going to send it to the

our heart is going to send it to the

our heart is going to send it to the cloud and in the cloud the very strong

cloud and in the cloud the very strong

cloud and in the cloud the very strong servers are going to make the diagnosis

servers are going to make the diagnosis

servers are going to make the diagnosis and send it to us back so the revolution

and send it to us back so the revolution

and send it to us back so the revolution is really really profound but let’s talk

is really really profound but let’s talk

is really really profound but let’s talk about the privacy risks you know our

about the privacy risks you know our

about the privacy risks you know our teeth collect a huge amount of

teeth collect a huge amount of

teeth collect a huge amount of information about us which is stored in

information about us which is stored in

information about us which is stored in the cloud this information is going to

the cloud this information is going to

the cloud this information is going to be analyzed in order to provide us

be analyzed in order to provide us

be analyzed in order to provide us better services but on the other hand if

better services but on the other hand if

better services but on the other hand if somebody will manage to get

somebody will manage to get

somebody will manage to get if data you will manage to violate our

if data you will manage to violate our

if data you will manage to violate our privacy let’s go to one very very sexy

privacy let’s go to one very very sexy

privacy let’s go to one very very sexy example this is a smart vibrator that

example this is a smart vibrator that

example this is a smart vibrator that the company actually developed and this

the company actually developed and this

the company actually developed and this smart vibrator is actually activated via

smart vibrator is actually activated via

smart vibrator is actually activated via the mobile phone what actually happened

the mobile phone what actually happened

the mobile phone what actually happened is that this company collected a lot of

is that this company collected a lot of

is that this company collected a lot of information about the patterns of usage

information about the patterns of usage

information about the patterns of usage of their customers and eventually their

of their customers and eventually their

of their customers and eventually their customers went to court and they had to

customers went to court and they had to

customers went to court and they had to pay $10,000 for every user because they

pay $10,000 for every user because they

pay $10,000 for every user because they potentially violated the privacy of

potentially violated the privacy of

potentially violated the privacy of their customers but to understand really

their customers but to understand really

their customers but to understand really the problem let’s go back to my day – my

the problem let’s go back to my day – my

the problem let’s go back to my day – my day of interacting with many many types

day of interacting with many many types

day of interacting with many many types of IOT is let’s see what may happen if

of IOT is let’s see what may happen if

of IOT is let’s see what may happen if somebody is going to get the data Oh

somebody is going to get the data Oh

somebody is going to get the data Oh somebody will manage to compromise my

somebody will manage to compromise my

somebody will manage to compromise my specific coyotes what will happen to my

specific coyotes what will happen to my

specific coyotes what will happen to my particular privacy first of all let’s

particular privacy first of all let’s

particular privacy first of all let’s start with this very interesting Smart

start with this very interesting Smart

start with this very interesting Smart Watch try to imagine that I’m sitting in

Watch try to imagine that I’m sitting in

Watch try to imagine that I’m sitting in my living room in front of my Smart TV

my living room in front of my Smart TV

my living room in front of my Smart TV and suddenly the police knocks on my

and suddenly the police knocks on my

and suddenly the police knocks on my door and they enter into my living room

door and they enter into my living room

door and they enter into my living room and they tell me that they have a fine

and they tell me that they have a fine

and they tell me that they have a fine for me because I drove while I was

for me because I drove while I was

for me because I drove while I was intoxicated so I have alcohol in my

intoxicated so I have alcohol in my

intoxicated so I have alcohol in my blood how come the police knows that I

blood how come the police knows that I

blood how come the police knows that I have alcohol in my blood well we did a

have alcohol in my blood well we did a

have alcohol in my blood well we did a research in Bangor University where we

research in Bangor University where we

research in Bangor University where we managed to collect information from the

managed to collect information from the

managed to collect information from the Smart Watch and connected to the level

Smart Watch and connected to the level

Smart Watch and connected to the level of alcohol in our blood in other words

of alcohol in our blood in other words

of alcohol in our blood in other words the information that this Smart Watch

the information that this Smart Watch

the information that this Smart Watch collects can be translated into the

collects can be translated into the

collects can be translated into the amount of alcohol in our blood but how

amount of alcohol in our blood but how

amount of alcohol in our blood but how come the police knows that I was driving

come the police knows that I was driving

come the police knows that I was driving when I was intoxicated please recall the

when I was intoxicated please recall the

when I was intoxicated please recall the connected car my car is connected so

connected car my car is connected so

connected car my car is connected so actually in the cloud provider of these

actually in the cloud provider of these

actually in the cloud provider of these connected cars there is knowledge when I

connected cars there is knowledge when I

connected cars there is knowledge when I drove so if you correlate the data from

drove so if you correlate the data from

drove so if you correlate the data from the SmartWatch

the SmartWatch

the SmartWatch yet over the data from the connected car

yet over the data from the connected car

yet over the data from the connected car platform you know that I drove actually

platform you know that I drove actually

platform you know that I drove actually when I was intoxicated this is just one

when I was intoxicated this is just one

when I was intoxicated this is just one example another example if somebody will

example another example if somebody will

example another example if somebody will manage to compromise my SmartWatch I

manage to compromise my SmartWatch I

manage to compromise my SmartWatch I told you before this SmartWatch nodes

told you before this SmartWatch nodes

told you before this SmartWatch nodes what is my level of stress at every

what is my level of stress at every

what is my level of stress at every point in time imagine us at the time in

point in time imagine us at the time in

point in time imagine us at the time in the middle of a poker game

the middle of a poker game

the middle of a poker game somebody can derive immediately

somebody can derive immediately

somebody can derive immediately conclusion whether I am bluffing or not

conclusion whether I am bluffing or not

conclusion whether I am bluffing or not and these are just examples of what may

and these are just examples of what may

and these are just examples of what may happen if somebody will manage to

happen if somebody will manage to

happen if somebody will manage to compromise either my IOT device all the

compromise either my IOT device all the

compromise either my IOT device all the content of information that was

content of information that was

content of information that was delivered from my IO T’s to the cloud

delivered from my IO T’s to the cloud

delivered from my IO T’s to the cloud next let’s go to my connected car every

next let’s go to my connected car every

next let’s go to my connected car every connected car is reporting its location

connected car is reporting its location

connected car is reporting its location to its cloud service provider so if

to its cloud service provider so if

to its cloud service provider so if somebody will manage to hack into the

somebody will manage to hack into the

somebody will manage to hack into the cloud service provider they will know

cloud service provider they will know

cloud service provider they will know the location of many many cars in a

the location of many many cars in a

the location of many many cars in a specific country now what is the value

specific country now what is the value

specific country now what is the value of this information first of all you can

of this information first of all you can

of this information first of all you can analyze this data and the right

analyze this data and the right

analyze this data and the right conclusion about where the person is

conclusion about where the person is

conclusion about where the person is living where he is working and if you

living where he is working and if you

living where he is working and if you are really a very sophisticated safe

are really a very sophisticated safe

are really a very sophisticated safe you can even know to pinpoint every BMW

you can even know to pinpoint every BMW

you can even know to pinpoint every BMW exactly where he is standing at night in

exactly where he is standing at night in

exactly where he is standing at night in order to do a targeted theft not

order to do a targeted theft not

order to do a targeted theft not targeted attack target a theft against

targeted attack target a theft against

targeted attack target a theft against the particular owner of the car now

the particular owner of the car now

the particular owner of the car now let’s go to these smart glasses smart

let’s go to these smart glasses smart

let’s go to these smart glasses smart glasses are connected to the Internet so

glasses are connected to the Internet so

glasses are connected to the Internet so literally an attacker can compromise a

literally an attacker can compromise a

literally an attacker can compromise a specific piece of Google glass using a

specific piece of Google glass using a

specific piece of Google glass using a malware in addition there are many ways

malware in addition there are many ways

malware in addition there are many ways to compromise a personal computer inside

to compromise a personal computer inside

to compromise a personal computer inside the company we managed to develop a very

the company we managed to develop a very

the company we managed to develop a very intelligent malware that literally

intelligent malware that literally

intelligent malware that literally managed to create a very smart blinking

managed to create a very smart blinking

managed to create a very smart blinking on the screen of a PC and by that

on the screen of a PC and by that

on the screen of a PC and by that modulating and sending the data to the

modulating and sending the data to the

modulating and sending the data to the smart glasses and from the smart glasses

smart glasses and from the smart glasses

smart glasses and from the smart glasses to the internet so actually it is

to the internet so actually it is

to the internet so actually it is justifiable that many companies do not

justifiable that many companies do not

justifiable that many companies do not allow to bring smart glasses into the

allow to bring smart glasses into the

allow to bring smart glasses into the premises

premises

premises because if the smart lattice is

because if the smart lattice is

because if the smart lattice is compromised it can be used to leak a lot

compromised it can be used to leak a lot

compromised it can be used to leak a lot of information from the organization to

of information from the organization to

of information from the organization to the attacker next let’s look at this

the attacker next let’s look at this

the attacker next let’s look at this interesting smart fridge

interesting smart fridge

interesting smart fridge imagine you said that you are sitting at

imagine you said that you are sitting at

imagine you said that you are sitting at your home navigating your notebook and

your home navigating your notebook and

your home navigating your notebook and suddenly you get an amazing

suddenly you get an amazing

suddenly you get an amazing advertisement for a diet program if it

advertisement for a diet program if it

advertisement for a diet program if it will happen for me probably it’s a false

will happen for me probably it’s a false

will happen for me probably it’s a false positive but think about a general

positive but think about a general

positive but think about a general person that receives such an

person that receives such an

person that receives such an advertisement why it may happen in the

advertisement why it may happen in the

advertisement why it may happen in the future our student discovered that a

future our student discovered that a

future our student discovered that a smart fridge is actually sending

smart fridge is actually sending

smart fridge is actually sending information to the cloud each time that

information to the cloud each time that

information to the cloud each time that we are opening the fridge in other words

we are opening the fridge in other words

we are opening the fridge in other words when you analyze the data in the cloud

when you analyze the data in the cloud

when you analyze the data in the cloud you can use analytics to derive a

you can use analytics to derive a

you can use analytics to derive a conclusion that somebody is actually fat

conclusion that somebody is actually fat

conclusion that somebody is actually fat now based on that somebody will send me

now based on that somebody will send me

now based on that somebody will send me an advertisement but what could be even

an advertisement but what could be even

an advertisement but what could be even worse that somebody will not give me an

worse that somebody will not give me an

worse that somebody will not give me an insurance because they know my eating

insurance because they know my eating

insurance because they know my eating habits just because I’m using this smart

habits just because I’m using this smart

habits just because I’m using this smart fridge let’s go to a drone I describe to

fridge let’s go to a drone I describe to

fridge let’s go to a drone I describe to you me playing with the drone but me

you me playing with the drone but me

you me playing with the drone but me playing with the drone maybe it’s not my

playing with the drone maybe it’s not my

playing with the drone maybe it’s not my problem my problem is my neighbor

problem my problem is my neighbor

problem my problem is my neighbor displaying with the drone my neighbor

displaying with the drone my neighbor

displaying with the drone my neighbor can use a drone above its premises and

can use a drone above its premises and

can use a drone above its premises and he may use it to invade my privacy

he may use it to invade my privacy

he may use it to invade my privacy and I will not know that it’s actually

and I will not know that it’s actually

and I will not know that it’s actually happening we developed in Bengal

happening we developed in Bengal

happening we developed in Bengal University a very destructive research

University a very destructive research

University a very destructive research in which what we did and here you can

in which what we did and here you can

in which what we did and here you can see even my house we use a stimuli on

see even my house we use a stimuli on

see even my house we use a stimuli on the window such that if somebody is

the window such that if somebody is

the window such that if somebody is photographing if a drone our window we

photographing if a drone our window we

photographing if a drone our window we can intercept on the air the encrypted

can intercept on the air the encrypted

can intercept on the air the encrypted traffic from the drone to the operator

traffic from the drone to the operator

traffic from the drone to the operator of the drone and since we see that there

of the drone and since we see that there

of the drone and since we see that there is a correlation between the physical

is a correlation between the physical

is a correlation between the physical stimulus on the window that we are

stimulus on the window that we are

stimulus on the window that we are creating and the amount of traffic

creating and the amount of traffic

creating and the amount of traffic encrypted traffic that we receive we

encrypted traffic that we receive we

encrypted traffic that we receive we know for sure that actually somebody

know for sure that actually somebody

know for sure that actually somebody is photographing us and streaming these

is photographing us and streaming these

is photographing us and streaming these data encrypted to his own PC which tell

data encrypted to his own PC which tell

data encrypted to his own PC which tell us that actually somebody is invading

us that actually somebody is invading

us that actually somebody is invading our privacy what to do if it it’s

our privacy what to do if it it’s

our privacy what to do if it it’s another big story how to stop the drone

another big story how to stop the drone

another big story how to stop the drone from flying let’s look at our Smart TV

from flying let’s look at our Smart TV

from flying let’s look at our Smart TV you know a Smart TV is connected to the

you know a Smart TV is connected to the

you know a Smart TV is connected to the Internet

Internet

Internet it’s a part of the Internet of Things

it’s a part of the Internet of Things

it’s a part of the Internet of Things revolution if somebody will be able to

revolution if somebody will be able to

revolution if somebody will be able to compromise my Smart TV you will ever

compromise my Smart TV you will ever

compromise my Smart TV you will ever first of all to know what I am watching

first of all to know what I am watching

first of all to know what I am watching currently my TV but many many Smart TVs

currently my TV but many many Smart TVs

currently my TV but many many Smart TVs also possess a microphone and a camera

also possess a microphone and a camera

also possess a microphone and a camera and using that and adversary will be

and using that and adversary will be

and using that and adversary will be able to compromise our bedroom that’s

able to compromise our bedroom that’s

able to compromise our bedroom that’s very very risky as well to conclude in

very very risky as well to conclude in

very very risky as well to conclude in the future we are going to interact with

the future we are going to interact with

the future we are going to interact with many many IOT devices this IOT devices

many many IOT devices this IOT devices

many many IOT devices this IOT devices are going to collect a lot of

are going to collect a lot of

are going to collect a lot of information about us this information

information about us this information

information about us this information can be used to provide us better

can be used to provide us better

can be used to provide us better services but on the other hand if this

services but on the other hand if this

services but on the other hand if this information is going to be leaked to an

information is going to be leaked to an

information is going to be leaked to an adversary you will be able to use it to

adversary you will be able to use it to

adversary you will be able to use it to learn many many things about us and to

learn many many things about us and to

learn many many things about us and to compromise our privacy and it’s

compromise our privacy and it’s

compromise our privacy and it’s mandatory that whoever is managing these

mandatory that whoever is managing these

mandatory that whoever is managing these services will make sure that is using

services will make sure that is using

services will make sure that is using the best security technologies to

the best security technologies to

the best security technologies to protect our privacy from any potential

protect our privacy from any potential

protect our privacy from any potential violation thank you

”

Be First to Comment

Leave a Reply

Your email address will not be published. Required fields are marked *