Tizen, Security and The Internet of Things Casey Schaufler 1 - PowerPoint PPT Presentation

Tizen, Security and The Internet of Things Casey Schaufler 1

Casey Schaufler • Security Dinosaur • Smack Linux Security Module • Manager Tizen and Linux Kernel Security 2

Tizen • Linux based operating system • Project of the Linux Foundation • Lead by Samsung and Intel 3

Security • Does what it’s supposed to • Doesn’t do anything else • Know the difference 4

Internet of Things • Collection of computing devices • Heterogeneous • Autonomous 5

Things • Just want to perform their function • Not primarily computers 6

Things need to communicate • Willing to talk to anyone • Wide variety of “networks” • Free from traditional administration 7

Device Views of the Internet of Things • 8

Security By Proximity Only connect with things nearby 9

Security by Obscurity No one could possibly guess! 10

Security By Pairing Ask human permission Requires a user interface 11

Security by Wire 1970’s Smart House 12

OPEN INTERCONNECT CONSORTIUM 13

Back To Tizen • Linux distribution for devices • Collection of profiles • Common security base 14

Tizen Security Basics HTML5 Native Application Application Weston Crosswalk Ofono Bluetooth tz-launcher X11 Systemd Cynara dbus Buxton Connman Smack Kernel Capabilities Services User Based Controls 15

Tizen Three Domain Security Native Application HTML5 Application Write User Read Additional restrictions System may apply Floor (“_”) 16

Tizen Application Privileges HTML5 Application Native Application Service Cynara Service Linux Kernel Services 17

Security Perimeter Internet Bluetooth Application 4G Body Area Network 18 18

Application Privilege Attributes • Name of the privilege • http://tizen.org/privilege/vibrator • Smack label of requester • RaunchyRhinos • UID of requestor • 5001 • Access permitted • r, rw , … 19

Native Application Woes • Use kernel interfaces directly • Avoid service based controls 20

System Object Attributes • Smack label • UID • GID • Mode bits • Smack access rules 21

Running Applications • Unique Smack label per application • Unique UID per user account • Application launcher 22

Thank You