Includes bibliographical references and index.

Copyright; Table of Contents; Preface; O'Reilly Safari; How to Contact Us; Acknowledgments; Chapter 1. Brave New Internet; Worst-Case Scenarios: Cyber Love Canal; What's Different?; Lifetimes; The IoT in the Physical World; Inevitable and Unfortunate Decay; Zero-Days and Forever-Days; The Fix is In?; The IoT's Impact on the Physical World; Houses; Cars; Traffic; Airplanes; Infrastructure; Medicine; The Physical World's Impact on the IoT; Missing Things; Large Attack Surface; Jumping Across Boundaries; Worst-Case Scenarios: Cyber Pearl Harbor; Targeted Malicious Attacks in the IoT

Where to Go NextWhat Do We Do?; What Comes Next; Works Cited; Chapter 2. Examples and Building Blocks; Computing Devices; Basic Elements; Moore's Law; How IoT Systems Differ; Architectures for an IoT; Connection to Other Computers; Connection to the Physical World; The Backend; The Bigger Picture; What's Next; Works Cited; Chapter 3. The Future Has Been Here Before; Bug Background; Integer Overflow; Race Conditions; Memory Corruption; Impossible Scenarios; Smart Health IT; The Therac-25; The Sad Story; Today; Past and Future; Smart Grid; The Balancing Act; Lights Out in 2003; Root Causes

TodayPast and Future; Smart Vehicles; The Dawn of Fly-by-Wire; Fear of the A320; What Happened Next; Past and Future; Today; Not Repeating Past Mistakes; Works Cited; Chapter 4. Overcoming Design Patterns for Insecurity; Anti-Pattern: Doing Too Much; Instance: Failure of Input Validation; Instance: Excess Power; Instance: Differential Parsing; Anti-Pattern: Coding Blunders; Anti-Pattern: Authentication Blunders; Instance: No Authentication; Instance: Default Credentials; Instance: Permanent Credentials; Instance: No Delegation; Instance: Easy Exposure; Moving Forward

Anti-Pattern: Cryptography BlundersInstance: Bad Randomness; Instance: Common Keys; Instance: Bad PKI; Instance: Aging of Cryptography and Protocols; A Better Future; Works Cited; Chapter 5. Names and Identity in the IoT; Who Is That, Really?; Beyond Bits; Authorization; The Standard Cryptographic Toolkit; The Somewhat Impossible; Symmetric Cryptography; Public Key Cryptography; Public Key Infrastructure; Cryptographic Hashing; The Price Tag; The Newer Toolkit; Macaroons; Blockchains; PUFs; Addresses and Names; IoT Challenges; Ontologies of Association; Ontologies of Interaction

PKI and Large PopulationsConstrained Devices and Channels; Privacy Side Effects; Cryptographic Decay; Moving Forward; Works Cited; Chapter 6. The Internet of Tattletale Devices; Cautionary Tales; IoC Privacy Spills; IoT Privacy Worries; When Things Betray Their Owners; Your Things May Talk to Police; Your Things May Phone Home; Your Things May Talk to the Wrong People; Emerging Infrastructure for Spying; Wearables and Health; Internet of Big Brother's Things; Getting What We Want; Saying What We Want; Law and Standards; Technological Enforcement; Works Cited

This book explains how we can avoid simple flaws that have plagued several dramatic IT advances in recent decades. Developers, engineers, industrial designers, makers, and researchers will explore "design patterns of insecurities" and learn what's required to route around or fix them in the nascent IoT

By 2020, the Internet of Things (IoT) will consist of millions of computational devices intimately connected to real-world aspects of human life. In this insightful book, Professor Sean Smith, who worked in information security long before the web appeared, explains that if we build the IoT the way we built the current internet and other information technology initiatives, we're headed for trouble. With a focus on concrete solutions, The Internet of Risky Things explains how we can avoid simple flaws that have plagued several dramatic IT advances in recent decades. Developers, engineers, industrial designers, makers, and researchers will explore "design patterns of insecurities" and learn what's required to route around or fix them in the nascent IoT. -- Provided by publisher.