The Future of IoT : Toward More Secure and Human-Centered Devices

Co - organizer

• Afi Edoh, E-Hub, Africa.
• Juliana Harsianti, Global Voices, APAC

2.   Associated Programme Theme(s): Cyber Security, Internet of Things, Data Governance

3. Description

In 2016, the most prominent cyberattack on public record happened because of vulnerabilities in over 600,000 small, innocuous devices connected to the Internet. By harnessing the collective power of devices such as home routers and thermostats, cyber criminals were able to cripple major websites/systems such as power grid systems. This demonstration showed, without a doubt, that the security of the Internet of Things is a major concern.

From the consumer perspective, joint research between Internet Society and Consumers International has revealed some consumer attitudes toward the Internet of Things. A high number of respondents felt that privacy and security standards should be assured by regulators (88%), followed by manufacturers (81%) and championed by retailers (80%). Also, a high number of people (75%) distrust the way data is shared. Consumers are also thinking about the need for more formal regulation in the market. It is likely that this demand will grow as information about the risks associated with connected products becomes more widespread.

Starting from those concerns, this session will identify the security challenges throughout the complete process of IoT service delivery – from the infrastructure to the application layer. Speakers from different stakeholder groups s will discuss the solutions and challenges from their perspectives and the complexities of maintaining security when considering the different private actors involved in producing, operating and using IoT devices and onto the rights, roles and responsibilities of consumers and regulators in using and overseeing such devices. The panel will address case studies (e.g., the Dyn IoT DDoS attack) to demonstrate known and emerging security challenges., These include vulnerabilities with device software, protocols for securing devices, updating hardware and software, data aggregation, utilizing standards and best practices to securely register and manage devices. The panel will also share their policy views regarding providing security for the consumer, the data and the IoT devices themselves, to achieve the better IoT in the future.

4. Agenda

A. Introduction and session overview by moderator, some rules for Q&A, panelist introduction

B. Panelist presentation

Round 1 :  General view on I oT, cybersecurity and problems on around IoT Security (40 minutes)

Round 2 : The good practice to protecting your personal data (80 minutes)

C. Q&A on site plus remote participation: 

D. Conclusion remarks session by

·        speaker on each round

·        the moderator

5. Policy Questions 

A. General view on I oT and Cybersecurity:

1. What should consumers know about IoT security? What should manufacturers communicate at a minimum and what should governments mandate?
2. Which challenges are consumers facing, and how can policymakers steer the marketplace in the right direction to address them?

B. I.o.T security issue

1. Which IoT security initiatives or standards can improve the security of the IoT ecosystem in a meaningful way and at scale?
2. Which security challenges are unique to IoT and how can they be addressed?

C. Good practices to protect personal data

1. Who should shoulder which responsibilities (consumers vs. manufacturers vs. government)?
2. How long should IoT devices receive security support? What should be the responsibilities of consumers and manufacturers in maintaining the (security) hygiene of their devices?
3. What are the processes undertaken for governments to request data, and to what extent can these processes be made open and transparent?

6.     Chair(s) and/or Moderator(s)

• On site moderator : Solana Larsen, Mozilla Foundation
• Online moderator : Juliana Harsianti, Global Voices, MAG Member
• Rapporteur : Afi Edoh, E-Hub, MAG Member

7.     Panelists/Speakers

Round 1 :

• Benedikt Abendroth, Microsoft, Senior Security Program Manager
• Walid Al Saqaf, Senior Lecturer - Soderton University and Board of Trustee - ISOC

Round 2 :

• Lily Botsyoe, GCNet/GYIGF, Ghana.
• Wahyudi Djafar, Research Director - ELSAM, Indonesia
• Marit Hansen, Chief of Independent Centre for Data Protection, Germany
• Michael Ilishebo, Data Forensic - Zambia Police Service.

8.     Plan for in-room participant engagement/interaction

Format: Panel discussion

Duration: 120 minutes.

The session will allow lively interaction with panelists, the audience will be able to ask and comment after each panelist presentation. Offline and online moderator respectively will engage with the audience and encourage them to ask questions, as well as managing the flow of the discussion. 

9.     Remote moderator/Plan for online interaction

This session relies on the online participation due there is possibility some  stakeholders couldn’t be able come in person to Berlin. Online participation will make sure the main session have widely participant in order to achieve discussion with diverse audience and geographic location

• Zoom platform/IGF Platform
• Live Tweet with certain hashtags, display on the screen.

10.   Desired results

• To create/to plan a common denominator for robust communication and data standards that work together and provide real world benefits.
• On demand by the consumer, companies should explore how to deliver assurances to consumers that their devices and services are helpful and useful without crossing the line into crepiness. At this level, company along with another stakeholder could help to build trust in connected devices among consumers.
• The IoT will require new laws along with significant and ongoing changes to our social mores and to explore the more human centered IoT