THE ENGINEERING OF MICROPROCESSOR SYSTEMS
THE BADUSB THUMB DRIVE AIR-GAP SECURITY STUXNET DESIGNING SAFE AND SECURE CYBER-PHYSICAL SYSTEMS CONSTRAINED COMPUTING AND MOORE’S LAW TRUSTED IOT NETWORKS AND THE NETWORK EDGE CONCLUSION CHAPTER 2: IOT FRAMEWORKS AND COMPLEXITY INTRODUCTION HISTORICAL BACKGROUND TO IOT IOT ECOSYSTEM ELEMENTS OF AN IOT SYSTEM IOT DEVICE IOT NETWORK IOT SYSTEM MANAGEMENT LLIT B K IOT FRAMEWORK SUMMARY IOT FRAMEWORK CONSIDERATIONS IOT FRAMEWORK ARCHITECTURE DATA OBJECT LAYER NODE INTERACTION LAYER PLATFORM ABSTRACTION LAYER PLATFORM LAYER SECURITY CHALLENGES WITH IOT FRAMEWORKS CONSUMER IOT FRAMEWORK STANDARDS OPEN CONNECTIVITY FOUNDATION (OCF) ALLSEEN ALLIANCE/ALLJOYN UNIVERSAL PLUG AND PLAY LIGHTWEIGHT MACHINE 2 MACHINE (LWM2M) ONE MACHINE TO MACHINE (ONEM2M) INDUSTRIAL IOT FRAMEWORK STANDARDS INDUSTRIAL INTERNET OF THINGS CONSORTIUM (IIC) AND OPENFOG CONSORTIUM OPEN PLATFORM COMMUNICATIONS-UNIFIED ARCHITECTURE (OPC-UA) DATA DISTRIBUTION SERVICE (DDS) FRAMEWORK GATEWAYS FRAMEWORK GATEWAY ARCHITECTURE SECURITY CONSIDERATIONS FOR FRAMEWORK GATEWAYS SUMMARY CHAPTER 3: BASE PLATFORM SECURITY HARDWARE BUILDING BLOCKS BACKGROUND AND TERMINOLOGY ASSETS, THREATS, AND THREAT PYRAMID INVERTED THREAT PYRAMID END-TO-END (E2E) SECURITY SECURITY ESSENTIALS BASE PLATFORM SECURITY FEATURES OVERVIEW CONVERGED SECURITY AND MANAGEABILITY ENGINE (CSME) SECURE/VERIFIED, MEASURED BOOT AND BOOT GUARD TRUSTED EXECUTION TECHNOLOGY (TXT) PLATFORM TRUST TECHNOLOGY (PTT) ENHANCED PRIVACY ID (EPID) MEMORY ENCRYPTION TECHNOLOGIES DYNAMIC APPLICATION LOADER (DAL) SOFTWARE GUARD EXTENSIONS (SGX) – IA CPU INSTRUCTIONS IDENTITY CRISIS ENHANCED PRIVACY IDENTIFIER (EPID) PTT/TPM DEVICE BOOT INTEGRITY – TRUST BUT VERIFY SECURE BOOT MECHANISMS OVERVIEW OF BIOS/UEFI SECURE BOOT USING BOOT GUARD VERSION 1 0 (BTG) DATA PROTECTION – SECURING KEYS, DATA AT REST AND IN TRANSIT INTEL PLATFORM TRUST TECHNOLOGY (PTT) WINDOWS PTT ARCHITECTURE LINUX PTT SOFTWARE STACK RUNTIME PROTECTION – EVER VIGILANT INTEL VIRTUALIZATION TECHNOLOGY (INTEL VT) SOFTWARE GUARD EXTENSIONS (SGX) INTEL CSE/CSME – DAL INTEL TRUSTED EXECUTION TECHNOLOGY (TXT) THREATS MITIGATED ZERO-DAY ATTACKS OTHER ATTACKS REFERENCES CHAPTER 4: IOT SOFTWARE SECURITY BUILDING BLOCKS UNDERSTANDING THE FUNDAMENTALS OF OUR ARCHITECTURAL MODEL OPERATING SYSTEMS THREATS TO OPERATING SYSTEMS ZEPHYR: REAL-TIME OPERATING SYSTEM FOR DEVICES LINUX OPERATING SYSTEMS HYPERVISORS AND VIRTUALIZATION THREATS TO HYPERVISORS INTEL® ACRN ACRN SUMMARY SOFTWARE SEPARATION AND CONTAINMENT CONTAINMENT SECURITY PRINCIPLES THREATS TO EXTENDED APPLICATION CONTAINMENT CONTAINERS KATA CONTAINERS TRUSTED EXECUTION ENVIRONMENTS CONTAINMENT SUMMARY NETWORK STACK AND SECURITY MANAGEMENT INTEL DATA PLANE DEVELOPMENT KIT SECURITY MANAGEMENT NETWORK STACK AND SECURITY SUMMARY DEVICE MANAGEMENT MESH CENTRAL WIND RIVER HELIX DEVICE CLOUD DEVICE MANAGEMENT SUMMARY SYSTEM FIRMWARE AND ROOT-OF-TRUST UPDATE SERVICE THREATS TO FIRMWARE AND ROT UPDATE TURTLE CREEK SYSTEM UPDATE AND MANAGEABILITY SERVICE SYSTEM FIRMWARE AND ROT SUMMARY APPLICATION-LEVEL LANGUAGE FRAMEWORKS JAVASCRIPT AND NODE JS OR SAILS JAVA AND ANDROID EDGEX FOUNDRY APPLICATION-LEVEL FRAMEWORK SUMMARY MESSAGE ORCHESTRATION MESSAGE QUEUING TELEMETRY TRANSPORT OPC UNIFIED ARCHITECTURE CONSTRAINED APPLICATION PROTOCOL MESSAGE ORCHESTRATION SUMMARY APPLICATIONS CHAPTER 5: CONNECTIVITY TECHNOLOGIES FOR IOT ETHERNET TIME-SENSITIVE NETWORKING LEGACY ETHERNET-BASED CONNECTIVITY IN INDUSTRIAL APPLICATIONS KEY BENEFITS OF TSN TSN STANDARDS TSN PROFILES OPC-UA OVER TSN OVERVIEW OF WIRELESS CONNECTIVITY TECHNOLOGIES CONSIDERATIONS FOR CHOOSING WIRELESS TECHNOLOGIES FOR IOT WI-FI BLUETOOTH ZIGBEE NFC GPS/GNSS CELLULAR 5 G CELLULAR LPWAN – LOW-POWER WIDE AREA NETWORKS A CASE STUDY – SMART HOMES CHAPTER 6: IOT VERTICAL APPLICATIONS AND ASSOCIATED SECURITY REQUIREMENTS COMMON DOMAIN REQUIREMENTS AND THE SECURITY MVP SOME COMMON THREATS RETAIL SOLUTIONS SECURITY OBJECTIVES AND REQUIREMENTS THREATS STANDARDS – REGULATORY AND INDUSTRY TRANSPORTATION SOLUTIONS CONNECTED VEHICLE INFRASTRUCTURE MITIGATIONS INDUSTRIAL CONTROL SYSTEM (ICS) AND INDUSTRIAL IOT (IIOT) DIGITAL SURVEILLANCE SYSTEM