Internet of Things – Think twice Aiko Pras TU Twente Holland Strikes Back 2015

1. University of Twente
the Netherlands
Prof.dr.ir. Aiko Pras
a.pras@utwente.nl
http://wwwhome.cs.utwente.nl/~pras/
Internet of Things
Think twice

2. What made me think…
2

3. DDoS Ziggo
3

4. Booters
4

5. Booters
5
DNS
0
1.5
3
4.5
6
7.5
0 20 40 60 80 100
Trafficrate[Gbps]
Time [s]
CharGen

6. Booters
6
Booter
Offer
[Gbps]
1 http://boo....tw ?
2 http://res.....info 5
3 http://ano....net 5
4 http://des....com 25
5 http://fla....net ?
6 http://dej....com 10
7 http://reb....com Up to 3
8 http://gri....com 6
9 http://qua....net 1,5
10 http://oly....org Up to 3
11 http://ebo....com ?
12 http://vdo....net ?
13 http://res....ca 8
14 http://oni....com ?
Price
[€]
10,90
1,95
3,12
3,89
3,89
3,89
3,00
3,90
8,00
4,90
free
3,11
3,90
3,90
Attacks
based on
DNS
DNS
DNS
DNS
CharGen
DNS
CharGen
DNS
DNS
IPs
Involved
8281
7369
6075
4486
3779
2970
281
78
54

7. Booters
7
Booter
Offer
[Gbps]
1 http://boo....tw ?
2 http://res.....info 5
3 http://ano....net 5
4 http://des....com 25
5 http://fla....net ?
6 http://dej....com 10
7 http://reb....com Up to 3
8 http://gri....com 6
9 http://qua....net 1,5
10 http://oly....org Up to 3
11 http://ebo....com ?
12 http://vdo....net ?
13 http://res....ca 8
14 http://oni....com ?
Price
[€]
10,90
1,95
3,12
3,89
3,89
3,89
3,00
3,90
8,00
4,90
free
3,11
3,90
3,90
Attacks
based on
DNS
DNS
DNS
DNS
CharGen
DNS
CharGen
DNS
DNS
IPs
Involved
8281
7369
6075
4486
3779
2970
281
78
54
3381x

8. Building the Ultimate DDoS
8
We identified about 1.2 million
unique unprotected devices

9. Internet of Things
9
There will be billions of IoT devices
According to HP, 70% will be vulnerable

10. Who is more dangerous?
10

11. Conclusions
• Expect DDoS attacks by Terrorists
• Expect tenths of Terabits/second
• We are not prepared
• NAWAS
• Trusted Network Initiative (TNI)
11

12. Have fun ;-)