- iot-wg - mailman.ripe.net

Re: [iot-wg] IoT BCOP TF Document - Call for comments
by e.vanuden＠avm.de 27 Oct '20

27 Oct '20

Hi Eliot, I´m refering to the Stacked Router concept, so one CPE instead of two (stacked) In this case, the CPE Best regards, Eric van Uden AVM ICT GmbH Country Manager Netherlands Mr. van Coothlaan 10 6602 GT Wijchen Nederland Phone +31 24 6485381 Mobile +31 622 948356 e.vanuden(a)avm.de Bezoek onze website op http://nl.avm.de/ , vind ons leuk op Facebook of bekijk onze Google +-pagina en Youtube-kanaal. AVM GmbH for International Communication Technology, Alt-Moabit 95, 10559 Berlin, Germany HRB 48220 AG Charlottenburg, CEO (Geschäftsführer): Johannes Nill Von: "Eliot Lear" <lear(a)ofcourseimright.com> An: e.vanuden(a)avm.de, "sandoche Balakrichenan" <sandoche.balakrichenan(a)afnic.fr> Kopie: iot-wg(a)ripe.net Datum: 26-10-2020 14:21 Betreff: Re: [iot-wg] IoT BCOP TF Document - Call for comments Hi Eric, On 26.10.20 14:18, Eric van Uden via iot-wg wrote: For me this means that IoT security should be implemented in as little as possible devices connection the consumer to the internet - one device if at all possible thus avoiding stacked router scenarios that add unnecessary complexity and possibly even more IoT security issues. Precisely which device would you expect that to be: The CPE or the IOT device? Eliot

3 3

IoT BCOP TF Document - Call for comments
by sandoche Balakrichenan 26 Oct '20

26 Oct '20

Dear all, The IoT BCOP TF (/Jim Reid, Eliott Lear, Michael Richardson, Phil Stanhope, Peter Steinhäuser, Jelte Jansen, Jan Zorz, Sandoche Balakrichenan/) has been meeting almost every friday since RIPE 80 to produce the document titled : /"Architectural Considerations for IoT Device Security in the Home - //A guide for ISPs specifying CPE devices"/. The intention is to publish the final version of this document as RIPE Best Current Operational Practice (BCOP) document in the IoT scope. A Pdf format of the document is attached. Thanks for sending your comments on this document to the mailing list. Constanze & Sandoche (IoT WG Chairs)

4 3

Reminder: IoT WG (and friends) virtual Meetup tonight!
by Constanze Dietrich 26 Oct '20

26 Oct '20

*** Cancel all your dates! *** Tonight from 19:00 to 21:00 CET (UTC+1) we'll have our virtual Meetup "at the hotel bar"! Location: https://ripe.zoom.us/j/96850826494?pwd=ZGFlbFNRZTZZTnBZU1JiWWNNRms0dz09#suc… Meeting ID: 968 5082 6494 Passcode: 391117 Hope to see you all there! Constanze & Sandoche

1 0

Re: [iot-wg] IoT BCOP TF Document - Call for comments
by Michael Richardson 23 Oct '20

23 Oct '20

<#secure method=pgpmime mode=sign> sb> The IoT BCOP TF (/Jim Reid, Eliott Lear, Michael Richardson, Phil sb> Stanhope, Peter Steinhäuser, Jelte Jansen, Jan Zorz, Sandoche sb> Balakrichenan/) has been meeting almost every friday since RIPE 80 to sb> produce the document titled : /"Architectural Considerations for IoT sb> Device Security in the Home - //A guide for ISPs specifying CPE sb> devices"/. The intention is to publish the final version of this sb> document as RIPE Best Current Operational Practice (BCOP) document in sb> the IoT scope. Some feedback that we have received is that the document isn't able to provide clear guidance that would make it a BCOP. It is perhaps more of a technical report. An initial goal had been to be able to say what ISPs are currently doing with IoT devices, and thereby enable those who are writing RFPs to know what kind of things they might expect to be able to ask for. But, it's still too soon for that. So a question is: what category should we put on this document? -- Michael Richardson <mcr+IETF(a)sandelman.ca> . o O ( IPv6 IøT consulting ) Sandelman Software Works Inc, Ottawa and Worldwide

1 0

RIPE81 agenda and virtual meetup on 26 October
by Constanze Dietrich 19 Oct '20

19 Oct '20

Hi everyone! We've got two announcements regarding the upcoming RIPE meeting! ***** THE AGENDA for the IoT session of RIPE 81 (27 to 30 October) is set! ***** You can find the full Meeting Plan here: https://ripe81.ripe.net/programme/meeting-plan/ This time, we have 45 minutes on Thursday, 29 October, between 14:00 and 14:45 CET (UTC+1): -- Introduction (5 minutes) -- RIPE NCC IoT Update - MarcoHogewoning (10 minutes) -- Architectural Considerations for IoT Device Security in the Home: A guide for ISPs specifying CPE devices - IoT BCOP Task Force (30 minutes) [Quick reminder to review their work and help them with constructive feedback: https://www.ripe.net/ripe/mail/archives/iot-wg/attachments/20201013/5ab7a0d… ] ***** VIRTUAL MEETUP of the IoT WG (and friends) on Monday, 26 October, 19:00 to 21:00 CET (UTC+1) ***** As having 15 minutes more on hand than last time is certainly no substitute for coffee and lunch breaks, beerings or other social gatherings, we've arranged for a virtual get-together on Monday evening before RIPE 81 as a Zoom meeting. There's no agenda! We'd like to say hi, get to see and know each other, and have a few drinks of our choice together at the virtual "hotel bar". You'll find the link to the Zoom meeting here: https://ripe81.ripe.net/programme/parallel-events/#iot Hope to see you there! Constanze & Sandoche (IoT WG Chairs)

1 0

Fwd: interesting article
by sandoche Balakrichenan 04 Oct '20

04 Oct '20

Dear all, Vesna (RIPE) send us the following article ("Security Considerations for Internet of Things: A Survey"), which I am sure will be an interesting read. === https://link.springer.com/article/10.1007%2Fs42979-020-00201-3 Survey Article Published: 06 June 2020 Security Considerations for Internet of Things: A Survey Anca Jurcut, Tiberiu Niculcea, Pasika Ranaweera & Nhien-An Le-Khac === Sandoche.

1 0

Fwd: [n2women] 1st Annual Nelms (Online) Workshop on Women in IoT, October 12, 1pm-5pm (EDT)
by Vesna Manojlovic 29 Sep '20

29 Sep '20

FYI! -------- Forwarded Message -------- Subject: [n2women] 1st Annual Nelms (Online) Workshop on Women in IoT, October 12, 1pm-5pm (EDT) Date: Mon, 28 Sep 2020 14:30:30 -0400 From: Damla Turgut <turgut(a)EECS.UCF.EDU> Reply-To: N2Women <n2women(a)ACM.ORG>, Damla Turgut <turgut(a)EECS.UCF.EDU> To: n2women(a)ACM.ORG ************************** **CALL FOR PARTICIPATION** ************************** 1st Annual Nelms Workshop on Women in IoT Virtual Conference October 12, 1pm-5pm EDT (New York Time Zone) Register now at: http://iot.institute.ufl.edu/events/women-in-iot-2020/ Registration is free, but required to receive the zoom information. ************************** **WORKSHOP DESCRIPTION** ************************** The web of smart and connected devices that form the Internet of Things (IoT) is poised to impact every sphere of our lives as well as every market sector and drive the fourth industrial revolution. While IoT, in convergence with artificial intelligence (AI) and big data analytics, is rapidly changing our lives and society at large, we also face an increasing gender gap in the field of IoT technology and applications encompassing all aspects of research, development and practice. The goal of this workshop is to bring together women leaders from all sectors of IoT and students interested in the field of IoT to promote and enable increasing participation of women and addressing the gender gap issue in the field of IoT. The workshop organized by the members of the Warren B. Nelms Institute for the Connected World at University of Florida , in collaboration with several other universities in the state of Florida, will be held virtually; is free to join and open to all with registration. We cordially welcome participants from all sectors to join the workshop and contribute to its mission. ************************ **PROGRAM HIGHLIGHTS** ************************ The purpose of the workshop is to celebrate the achievements of women in areas related to the advancement of Internet of Things, discuss future changes in both technology and female advancement, and to encourage students and junior female faculty in this area. The list of speakers/panelists includes female engineering deans, department chairs, NSF program director and industry directors. The event webpage is here and includes the speaker bios: http://iot.institute.ufl.edu/events/women-in-iot-2020/ We are looking forward to seeing you soon in the online conference of Nelms WiT 2020! 2020 Co-Chairs: --------------------- Janise McNair, ECE, University of Florida My T Thai, CISE, University of Florida Organizing Committee: ------------------------------ Janise McNair, ECE, University of Florida My Thai, CISE, University of Florida Damla Turgut, CS, University of Central Florida Tempestt Neal, CIS, University of South Florida Liting Hu, CS, Florida International University ******** Website: http://iot.institute.ufl.edu/events/women-in-iot-2020/

2 1

Zigbee Alliance's Connected Home over IP
by Peter Steinhäuser 10 Sep '20

10 Sep '20

Dear collegues, after announcing the Project Connected Home over IP end of last year getting Amazon, Apple and Google on board for a joined effort to establish an IP based standard for IoT devices the project seems to be mostly on track for an initial early 2021 release: https://zigbeealliance.org/news_and_articles/project-development-to-reality/ <https://zigbeealliance.org/news_and_articles/project-development-to-reality/> I think this project might be of interest for this working group and for the RIPE community. I will further monitor the progress of the project and would like to invite everyone interested for a discussion one’s first standard specs are released. Thanks, Peter

2 1

Fwd: interesting article?
by sandoche Balakrichenan 19 Aug '20

19 Aug '20

Dear all, Vesna (RIPE) send us this document (https://www.cigionline.org/publications/standards-cybersecure-iot-devices-w…) to check if it could be interesting for the group. After skimming through it, I felt that the document could be useful, even though the contents are not entirely new AFAIK. Sandoche.

2 2

[Defcon 2020] Paul Marrapeses' speech about IoT P2P protocol design flaws
by Peter Steinhäuser 10 Aug '20

10 Aug '20

Dear Collegues, Paul Marrapese did some excellent work on researching about protocol vulnarabilities in popular IoT devices. https://www.youtube.com/watch?v=Z_gKEF76oMM Unfortunately I did not find a transcript, yet. Nevertheless the conclusion is to keep IoT devices disabled to communicate with the internet if possible and it also shows - again - the lack of interest from the device makers to adress the security flaws. Wishing you all a productive week and stay healthy. - Peter

2 1