Untitled

CPSC514 - Internet of Things and Web Security

• The course provides a comprehensive overview of the Internet of Things (IoT)
• Explores fundamental concepts, technologies, applications, and emerging trends
• Students will gain a solid understanding of IoT architecture, communication protocols, data management, and security considerations
• The course will delve into real-world IoT applications across various industries and discuss the ethical and societal implications.

Agenda

• Attendance
• Introductions
• Syllabus
• Survey
• Lecture

What is IoT?

• Internet of Things (IoT) includes a set of technologies and capabilities that are enabling new use cases and delivering services across a wide variety of markets and applications.
• IoT connects the unconnected
• IoT makes devices smart and autonomous
• IoT enables remote control and management

IoT Examples

• Personal Devices such as smart watches
• Smart manufacturing such as automated robots
• Smart cities such as connected traffic lights
• Scientific applications such as weather sensors

IoT vs Embedded Systems

• IoT is connected to the internet, embedded systems are not necessarily connected
• IoT sends data to a cloud server
• IoT requires more security than embedded systems
• IoT can consume more power because of connectivity requirements

Related Terms

• Robotics: Sensors and actuators working together to perform a task such as drones, cars, and printers
• Machine learning: Predicting future data based on previous data via Supervised and Unsupervised processes
• Supervised learning: Requires user interaction to train spam filters
• Unsupervised learning: Does not require user interaction
• Artificial Intelligence (AI): The ability of a computer/machine to perform activities that normally require human intelligence

DeepSeek AI

• DeepSeek was founded in 2023.
• CEO is Liang Wenfeng, also the co-founder of one of China's top hedge funds.
• In 2022, that fund acquired 10,000 nVidia A100 chips.
• DS is trained on H800 chips, which are not subject to export restrictions like A100 chips.
• DeepSeek processes data 11x faster than Open AI.
• Requires much less computing power than competing AI systems.
• nVidia stock lost $589 billion in value on January 27, 2025
• DeepSeek is Open-source
• Open AI is not open source
• Open-source (Open AI is not...)
• Test-Time Scaling (shows its train of thought)
• Mixture of Experts (MoE) breaks nodes into specialized roles

DeepSeek AI Hardware

• nVidia A100 (Hopper - 2020) is succeeded by the H100 (Ampre - 2023)
• H200 is the latest GPU; H800 is modified H100 for China
• The NVIDIA A100's successor is the NVIDIA H100
• H100 offers performance improvements over the A100
• Features a built-in Transformer Engine for handling large language models and dynamic programming instructions (DPX) for faster code execution
• The H100 is up to nine times faster for Al training and 30 times faster for inference compared to the A100
• NVIDIA has announced the H200, which is set for release in the second quarter of 2024
• Nvidia's PTX (Parallel Thread Execution) - intermediate instruction set architecture designed by Nvidia for its GPUs
• PTX sits between higher-level GPU programming languages (like CUDA C/C++ or other language frontends) and the low-level machine code (streaming assembly, or SASS)
• PTX is a close-to-metal ISA that exposes the GPU as a data-parallel computing device
• Once PTX is into SASS, it is optimized fo specific generation of Nvidia GPUs
• DeepSeek infringed on the copyright of OpenAl
• Distillation is a method of training an Al using the output of another Al
• OpenAl also has been been accused of copyright infringement
• DeepSeek is the AI firm claiming to have 50,000 Nvidia GPUs and has spent $1.6 billion on AI buildouts

IT and OT

• IT (Information Technology): Centers on managing, processing, storing, and securing data. It is mainly concerned with applications, data, and networks to support business operations.
• OT (Operational Technology): Focuses on the management and control of physical devices/industrial equipment. OT control machinery and processes in manufacturing, power generation, and utilities.
• IT primarily operates within business or office environments such as servers, data centers, cloud infrastructure
• OT functions in industrial environments where machinery, production lines, and physical equipment are critical
• IT involves software applications, databases, servers, laptops, and network hardware (routers, switches), as well as ERP, CRM and databases
• OT uses SCADA, PLCs, and ICS to manage physical processes and equipment.
• IT prioritizes data protection, privacy, and network security to mitigate cyber threats like malware, phishing, and data breaches.
• OT focuses on safety, reliability, and uptime of physical systems, protecting assets and maintaining operations
• IT emphasizes data integrity, confidentiality, and availability
• OT prioritizes system availability, personnel safety, and physical process efficiency over data integrity
• As Industries and IoT converge, enabling remote monitoring, predictive maintenance, and enhanced data analytics in industrial settings, creating cybersecurity challenges as OT systems weren't designed for connectivity

IoT Attributes

• Scalability: The capacity to increase the number of devices and data points without negatively impacting performance, requires IPv6 instead of IPv4
• IPv4 /8 = 16,777,216 IP addresses
• Communications via reliability, security, punctuality
• Analytics
• M2M (machine-to-machine) communication
• AI
• Cloud
• Big data analytics

Connectivity

• Cellular networks (LTE, 5G, etc.)
• Wi-Fi
• Bluetooth
• Ethernet

Wired vs Wireless

Wired

• High speed
• More security
• High cost
• Longer time to deploy

Wireless

• Lower speed
• Potential security problems
• Lower cost
• Quicker to deploy
• Can reach some places wired can't

Examples

• TP Link camera
  • Has Ethernet port and wireless capabilities
  • Uses DHCP (Dynamic Host Configuration Protocol) out of the box
  • Can be plugged in and found in the router's DHCP table
  • Connects to the web interface to configure Wi-Fi
• Wyze Cam
  • Does not have Ethernet
  • Uses an app and QR code to configure Wi-Fi network

Antenna Types

• Omnidirectional antenna
• Directional antenna

Range and Capacity

• Lower frequency yields higher range and lower speed
• Higher frequency yields higher speed and lower range
• Line of sight is a factor in range and capacity

Topologies

• Point to Point
• Star
• Ring
• Mesh

Wireless Connectivity

• Multipath propagation occurs when a radio signal reaches a receiving antenna via multiple paths.
• The radio signal bounces off objects like buildings, mountains, or even the atmosphere, creating multiple copies of the original signal that arrive at the receiver at different times
• Fading: The multiple signals can interfere with each other, either constructively (boosting the signal) or destructively (weakening it); fluctuations in signal strength known as fading
• Dispersion: The different path lengths cause the signal to spread out in time, making it harder to decode.
• Inter-symbol Interference (ISI): The spread out signal can overlap with neighboring symbols in digital communication, making it difficult to distinguish them
• Mitigating techniques include:
  • Diversity techniques: Using multiple antennas to receive the signal from different paths
  • Equalization: Processing the received signal to compensate for the distortion caused by multipath
  • Spread spectrum techniques: Spreading the signal over a wider frequency band to reduce the impact of fading

Spectrum

• Licensed: A license can be obtained from the government to use a particular radio spectrum, commonly used by wireless carriers, radio stations, and emergency responders
• Unlicensed
  • Available for anyone to use, where more devices lead to a lower bandwidth
• Frequencies vcan vary by country
  • GSM uses 850/1900 in the US
  • GSM uses 900/1800 in India

Multiplexing

• Is combining multiple data streams on a single link via wired or wireless connections
• Demultiplexer (demux) on the other side from the multiplexer

Types of Multiplexing

• Frequency division multiplexing (FDM)
• Time division multiplexing (TDM)
• Statistical multiplexing
• Space division multiplexing (SDM)

Quality of Service

• There are two main types of traffic: those sensitive to latency, and those sensitive to speed
• Examples of quality of service classifications are:
  • Live video
  • Recorded video
  • Video/audio calls
  • Gaming

Network Management

• Centralized management of configuration
• Fault detection
• Performance tuning
• Continuous monitoring
• Security validation

Connectivity Standards

• Getting devices to talk to each other requires standards and acronyms such as
  • Wi-Fi (802.11)
  • ZigBee (IEEE 802.15.4)
  • Cellular (2G – 5G)

Zigbee Connectivity

• See https://en.wikipedia.org/wiki/IEEE_802.15.4
• Low power consumption
• Low speed (up to 250kbps) data transfer rate
• 10-meter range
• Optimized for mesh networks
• Supports thousands of nodes in a mesh

Challenges with IoT

• Standards not developed for limited range, coverage in places lacking Wi-Fi or cellular connectivity
• Power requirements increase with transmission distance.
• It can be very cost sensitive
• There can be temperature ranges and humidity requirements
• Device size can also be a factor
• Data requirements include how much data, how often is it sent, is it clouod or on-prem Serviceability trade-offs may be made to save costs
• Onboard processing capabilities
• General Security

Cloud Services

• Chapman prefers the Microsoft shop
• Use Microsoft Azure services if possible, otherwise,
• Others: Amazon AWS, Google Cloud services