SE and the IoT Yann-Gal Guhneuc Workshop on Security and Privacy - PowerPoint PPT Presentation

SE and the IoT Yann-Gaël Guéhéneuc Workshop on Security and Privacy Engineering NII, Tokyo, 2016/03/22 This work is licensed under a Creative Commons Attribution-NonCommercial- ShareAlike 3.0 Unported License

2/36

3/36

4/36

5/36

The major cause of the software crisis software crisis is that the is that the The major cause of the machines have become several orders of magnitude machines have become several orders of magnitude more powerful! To put it quite bluntly: as long as there more powerful! To put it quite bluntly: as long as there were no machines, programming was no problem at were no machines, programming was no problem at all; when we had a few weak computers, program- - all; when we had a few weak computers, program ming became a mild problem, and now we have became a mild problem, and now we have ming gigantic computers, programming has become an gigantic computers, programming has become an equally gigantic problem. equally gigantic problem. Edsger — Edsger Dijkstra Dijkstra, The Humble Programmer , The Humble Programmer — (EWD340), Communications of the ACM (EWD340), Communications of the ACM 6/36

7/36

A New A New Software Software Crisis Crisis 8/36

9/36

A New A New Software Software Crisis? Crisis? 10/36

11/36

Tesla P85D Tesla P85D 12/36

Tesla P85D Tesla P85D Data is hidden in firmware Data is hidden in firmware Customer has access to the data Customer has access to the data Company has remote access Company has remote access New firmware fixes charging bug New firmware fixes charging bug 13/36

14/36

A New A New Software Software Crisis Crisis 15/36

Tesla P85D Tesla P85D • Development Development • • Release Release • • Feedback Feedback • • Change Change • • Security/Privacy Security/Privacy • 16/36

What? What? 17/36

18/36

Definitions � The Internet of Things is a network of physical objects connected to and access through the Internet � The things contain hardware and software to allow them to interact with the external environment and to let them and users interact with one another 19/36

20/36

Why? Why? 21/36

Usages � Monitor things � Predict usages � Optimise consumption � Manage life-cycle http://www.japanfs.org/en/news/archives/news_id034785.html 22/36

The value of a telecommunications network is proportional to the square of the number of connected users of the system ( n 2 ). —Robert Metcalfe, c. 1980 (attributed by George Gilder in 1993) 23/36

“[E]ven Metcalfe's law understates the value created by a group-forming network [GFN] as it grows. […] [T]he value of a GFN increases exponentially, in proportion to 2 n .” —David P. Reed, "The Law of the Pack" (Harvard Business Review, Feb. 2001,) But contrast with http://spectrum.ieee.org/computing/networks/metcalfes-law-is-wrong 24/36

Socialisation of everything http://makezine.com/2014/02/06/the-internet-of-things-why-does-it-matter/ 25/36

26/36

When? When? 27/36

www.slideshare.net/Sigmasoftware/internet-of-things-58751241 28/36

www.slideshare.net/Sigmasoftware/internet-of-things-58751241 news.softpedia.com/news/New-Infographic-Boosts-Your-Smartwatch-Knowledge-446497.shtml 29/36

www.slideshare.net/Sigmasoftware/internet-of-things-58751241 30/36

Tesla P85D Tesla P85D www.slideshare.net/Sigmasoftware/internet-of-things-58751241 31/36

32/36

How? How? 33/36

• Usage Usage • • Integration Integration • • Construction Construction • 34/36

Usage http://www.sine-wave.com/blog/enterprise-internet-of-things-platform-essential-layers 35/36

Integration http://img.deusm.com/designnews/2015/02/276684/Optimal-Design.jpg 36/36

Construction http://www.slideshare.net/RehmatMarwat/introduction-to-internet-of-things-45172425 37/36

Conclusion Conclusion 38/36

A New A New Software Software Crisis Crisis 39/36

Problems? Problems? 40/36

Solutions? Solutions? 41/36

Solutions? � Reactivity, scalability, configurability, resource consumption, robustness � Methods and development techniques � Architectures, interoperability https://www.computer.org/web/computingnow/swcfp1 42/36

Solutions? � Development tools, frameworks, platforms � Continuous delivery and integration � Verification and validation https://www.computer.org/web/computingnow/swcfp1 43/36

A New A New Software Software Crisis Crisis 44/36