Quiz 1: Securing IoT

On-body device (wearable)

Measure physiological signals of the body

Accelerometer

Measures device acceleration along 3 axis, X, Y, and Z (part of on-body device)

Gyroscope

Measures rate at which a device rotates around a spatial axis (part of on-body device)

Activity detection

Algorithms that use sensor readings to determine human activities (lifting, weights, sleep quality, etc.)

Confidentiality, integrity, availability

CIA stands for…

Spoofing, tampering, repudiation, info disclosure, DoS, elevation of privilege

STRIDE stands for…

LINDDUNN

Linking, Identifying, Non-repudiation, Detecting, Data Disclosure,
Unawareness, and Non-compliance

Confidentiality

Protecting information from unauthorized access.

Integrity

Data has not been modified by an unauthorized user.

Availability

Information is accessible when needed.

physical boundaries

Wireless communications lack natural ____ ____.

2.4 GHz

Bluetooth frequency (Bluetooth Low Energy, BLE)

Frequency/band

Range of radio frequencies used to transmit data

True

Every country is in-charge of the spectrum allocation; Licensed and Unlicensed (900Mhz, 2.4GHz, 5GHz in the US)

Channels

Frequency is divided into…

The same channel

Devices need to be on ____ ____ ____ in order to communicate.

2 MHz

Each BLE channel is __ ___ apart.

Modulation

The process of changing a signal to transmit useful data; digital data (bits) are encoded into analog signals suitable for transmission over wireless channels.

Modulation

Devices need to have the same _____ technique to communicate..

Demodulation

Converting a signal back into bits.

Gaussian Frequency-Shift Keying (GFSK)

BLE modulation is…

Eavesdropping attack

Signals can be sent or received by anybody in possession of radio and knows the channel and modulation used; passive attack

False; weakens

True or False: Wireless signal strengthens as it propagates through matter (e.g. walls, windows, etc.)

True

True or False: Wireless communications depends on making the signal intelligible over the noise floor. Signal-to-noise ratio (SNR) is an indicator of performance. Higher SNR have better performance.

True

True or False: Factors such as noise, transmission power, etc. affect signal-to-noise ration (SNR)

Impersonation attack

Adversary pretends to be someone else, and convinces device to connect to it; active attack; may rely on combining with other attacks to pull off

Man in the middle (MITM)

Similar to impersonation attack, but general include forwarding behavior between entities; can be used for more than just obtaining data

Background of developers, privacy policy (what data is being collected, who is it shared with, etc..), language used in privacy policy (are there contradictions? unclear or ambiguous statements? downplay or modify the emphasis of certain sentences?), readability, does the app use 3rd party libraries?

Things to analyze to protect personal data