- ESB - iotsfmm.org

EU Cyber Resilience Act: Socio-Technical and Research Challenges
by Mandalari, Anna Maria Sept. 12, 2024

Sept. 12, 2024

Hi all, Please find attached the paper we produced after the Dagstuhl Seminar we had in March: https://www.dagstuhl.de/en/seminars/seminar-calendar/seminar-details/24112 Anna — Dr Anna Maria Mandalari Assistant Professor Department of Electronic & Electrical Engineering - University College London Honorary Research Fellow ISST - Imperial College London https://annamandalari.com/

1 0

IoTSF ESB Meeting Sept 12th (update).
by John Moor Sept. 9, 2024

Sept. 9, 2024

Dear ESB I hope that you’ve had / are having / are looking forward to a good summer break. Looking ahead to September. I am pleased to inform you that we will meet at UCL, London thanks to Anna. The calendar invite has been updated (and on Basecamp) and detailed below to cover all bases. Overview We will be reviewing our direction of travel and strategic matters hence I would urge as many of you to attend as possible as we’d like your views. Stephen has elected to produce a “Chairman’s paper” for circulation in advance along with the agenda. Date: Sept 12 Time: 12 – 4:30pm Location: UCL Roberts Building / Barlow Room the directions: https://www.ee.ucl.ac.uk/mflanaga/directions.pdf Barlow Room at Roberts Building: https://maps.app.goo.gl/dX68vnbSc8bC9S8u6 That’s all for now. KR., John Moor Managing Director, IoT Security Foundation Make it safe to connect: Build Secure – Buy Secure – Be Secure Take a look at our FREE downloads for developers, users and the security-minded organisation: * Our #1 Download: IoT Security Assurance Framework Release 3.0 * Our #2 Download: Secure By Design Best Practice Guides * Read Our Latest Market Research Report on Vulnerability Disclosure Practice (VDP). * IoT Security: Supply Chain Considerations and Software Bill of Materials (SBoM) * Release 2 Vulnerability Disclosure Guide * Consumer IoT security quick guides and training webinars * Smart Buildings: Cybersecurity for Facilities Professionals * Home / Enterprise / Healthcare Security Architectures All available at https://iotsecurityfoundation.org<https://iotsecurityfoundation.org/> Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237

2 2

IoTSF ESB - Physical Meeting
by John Moor Aug. 20, 2024

Aug. 20, 2024

NOTE: THIS IS NOT A VIRTUAL MEETING – PHYSICAL ONLY More on location: UCL Roberts Building / Barlow Room the directions: https://www.ee.ucl.ac.uk/mflanaga/directions.pdf Barlow Room at Roberts Building: https://maps.app.goo.gl/dX68vnbSc8bC9S8u6 Agenda to follow.

1 0

IoTSF ESB Minutes and Update
by John Moor May 23, 2024

May 23, 2024

Dear ESB Thank you to those who attended and contributed to the discussions. * Notes attached for all; I will follow up on the actions as necessary. * As a reminder, all notes and supporting materials can be retrieved from the basecamp area [IoTSF ESB Communications > Docs & Files > ESB Meeting Notes] * I have issued a calendar invite for Sept 12th – please ignore the Teams information as this was done in error (tcchh!). Please be aware that there will be an IoSTF Plenary Meeting in London on July 3rd – hope to see as many as possible there (see here: https://iotsecurityfoundation.org/event/iotsf-plenary-2024/ ). Also, I am delighted to say we have a new team member who will be leading the Trusted AI Bill of Materials (TAIBOM) project and our AI related activity. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org

1 0

FW: Identity and security
by John Moor May 21, 2024

May 21, 2024

Hi all, Before I respond to Chris Edwards (a highly regarded technology journalist), does anyone have any comment, knowledge or view on the question? Thanks in advance. KR., John Moor Managing Director, IoT Security Foundation Make it safe to connect: Build Secure – Buy Secure – Be Secure Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://iotsecurityfoundation.org<https://iotsecurityfoundation.org/> Date: Monday, 20 May 2024 at 10:25 To: John Moor <john.moor(a)iotsecurityfoundation.org> Subject: Identity and security Hi John, I hope things are going well. I’m doing some stuff on digital identity and things like the Trust over IP Foundation’s work, primarily for NE in the short term. Is the IoTSF engaged in any way with the work going on with vLEIs and the ToIP’s verifiable indentifier (VID) – basically an IP address with a mechanism for checking the identity of a node? It might be a bit outside the scope of the IoTSF but OTOH might be something the organisation is beginning to track. The vLEI is somewhat more finance-oriented right now but looks as though it might have some value for the IoT/edge-computing space (basically to help check provenance of data or of software containers that a remote user might try to run on an edge node). Best Chris ____________ Chris Edwards Freelance Journalist

1 0

Re: IoTSF ESB - Physical Meeting
by John Moor May 21, 2024

May 21, 2024

Thanks for the spot Richard – it’s that playful company Microsoft (grrr) joshing with its users again. It will be a physical Meeting only as we have found hybrid is problematic. John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org From: Richard Marshall <richard(a)xitex.co.uk> Date: Monday, 20 May 2024 at 09:35 To: John Moor <john.moor(a)techworks.org.uk> Subject: Re: [Esb] IoTSF ESB - Physical Meeting Morning John, I am confused, the subject suggests a physical meeting but the invite includes a teams invite...? What am I missing? Cheers Richard On 17/05/2024 14:10, John Moor wrote: Agenda and joining details to be confirmed - please mark your diaries. ________________________________________________________________________________ Microsoft Teams Need help?<https://aka.ms/JoinTeamsMeeting?omkt=en-GB> Join the meeting now<https://teams.microsoft.com/l/meetup-join/19%3ameeting_NmM5MmY0MzItNzY2Yi00…> Meeting ID: 372 074 276 159 Passcode: qErDKr ________________________________ For organisers: Meeting options<https://teams.microsoft.com/meetingOptions/?organizerId=0aae5b3d-0025-46cb-…> ________________________________________________________________________________ John Moor has invited you to IoTSF ESB - Physical Meeting Title: IoTSF ESB - Physical Meeting Location: t.b.c When: 12 September 2024 12:00 – 17:00 Organiser: John Moor <john.moor(a)techworks.org.uk><mailto:john.moor@techworks.org.uk> Description: Agenda and joining details to be confirmed - please mark your diaries. ________________________________________________________________________________ Microsoft Teams Need help?<https://aka.ms/JoinTeamsMeeting?omkt=en-GB><https://aka.ms/JoinTeamsMeeting?omkt=en-GB> Join the meeting now<https://teams.microsoft.com/l/meetup-join/19%3ameeting_NmM5MmY0MzItNzY2Yi00…><https://teams.microsoft.com/l/meetup-join/19%3ameeting_NmM5MmY0MzItNzY2Yi00…> Meeting ID: 372 074 276 159 Passcode: qErDKr ________________________________ For organisers: Meeting options<https://teams.microsoft.com/meetingOptions/?organizerId=0aae5b3d-0025-46cb-…><https://teams.microsoft.com/meetingOptions/?organizerId=0aae5b3d-0025-46cb-…> ________________________________________________________________________________ Attendees: * esb(a)iotsfmm.org<mailto:esb@iotsfmm.org> <esb(a)iotsfmm.org><mailto:esb@iotsfmm.org> _______________________________________________ ESB mailing list -- esb(a)iotsfmm.org<mailto:esb@iotsfmm.org> To unsubscribe send an email to esb-leave(a)iotsfmm.org<mailto:esb-leave@iotsfmm.org>

1 0

IoTSF ESB - Physical Meeting
by John Moor May 21, 2024

May 21, 2024

NOTE: THIS IS NOT A VIRTUAL MEETING – PHYSICAL ONLY Agenda and joining details to be confirmed - please mark your diaries.

1 0

IoTSF ESB - Physical Meeting
by John Moor May 17, 2024

May 17, 2024

Agenda and joining details to be confirmed - please mark your diaries. ________________________________________________________________________________ Microsoft Teams Need help?<https://aka.ms/JoinTeamsMeeting?omkt=en-GB> Join the meeting now<https://teams.microsoft.com/l/meetup-join/19%3ameeting_NmM5MmY0MzItNzY2Yi00…> Meeting ID: 372 074 276 159 Passcode: qErDKr ________________________________ For organisers: Meeting options<https://teams.microsoft.com/meetingOptions/?organizerId=0aae5b3d-0025-46cb-…> ________________________________________________________________________________

1 0

IoTSF ESB Agenda for virtual meeting May 8th, 10am - 12 noon
by John Moor May 1, 2024

May 1, 2024

Dear ESB Here is the agenda for next week’s meeting. 1. Welcome to new ESB members (SP) 2. IoTSF 10th Conference - October 23rd, London (JWM/All) 3. Working Groups (All) * Assurance Framework (JWM/NA) i. Evolution ii. Linking with 3rd parties * Regulatory Watch (SP) * SBE (SS) 1. Projects (NA/All) * SNbD * TAIBOM (TechWorks AI) 2. AOB (All) 3. Next Meeting Looking forward talking to you all. Please find last meeting minutes attached (also available on basecamp) Meeting details just in case: John Moor is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/82624140062?pwd=9zPMpLjubfRYI5wkDAxYJ3EZOOVxfX.1 Meeting ID: 826 2414 0062 Passcode: 136594 KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org

1 0

Couple of points - please respond by Apr 10.
by John Moor April 12, 2024

April 12, 2024

Dear ESB ESB Member Recommendation At the last ESB we discussed how we fortify/evolve the board. Having successfully welcomed Peter Davies, I would like to recommend we now invite Dr. Anna Maria Mandalari to join the board. Who is Anna? Anna is well known to the IoTSF membership as she has presented at IoTSF conferences (2022 and 2023), is an Assistant Professor at UCL and runs an IoT lab. Here’s her last talk: https://www.youtube.com/watch?v=v-_dJsa4lSs And here’s her bio: Anna Maria Mandalari works as Assistant Professor at University College London (UCL). She is member of the UCL’s Academic Center of Excellence in Cyber Security Research (ACE-CSR). She is Honorary Research Fellow at the ISST at Imperial College London. She obtained her PhD as part of the Marie Skłodowska-Curie action, intended for excellent researchers, affiliated with the Carlos III University of Madrid. Her research interests are Internet of Things (IoT), privacy, security, networking and Internet measurement techniques. In addition to her research, Anna is Co-Founder & CTO of a startup providing privacy and security solutions for consumer IoT devices. She gives invited talks all around the world to promote research and create awareness on security, privacy, and ethical AI. Most of her research experiences have also significantly contributed to several EU-funded research projects and have had a strong media impact. I have spoken to Anna on several occasions, observed her work and I am therefore happy to commend her to you. Therefore, please let me know your position by c.o.b Wednesday April 10th – i.e. do you: 1. Agree – (invite her - she’ll make a great addition). 2. Not sure – (hmmm - I have questions/concerns). 3. Dunno – (ok – I have no opinion wither way). Strategic Liaison Recently, the Connectivity Standards Alliance (CSA – nee ‘Zigbee Alliance’) announced a new IoT Device Security specification (https://csa-iot.org/newsroom/the-connectivity-standards-alliance-product-se…) One of our members made a post on Basecamp asking whether it would add to confusion for manufacturers and whether it might affect our own work with the Assurance Framework. Fortunately, one of its protagonists (Chair of the CSA’s Working Group), is also a member, and on Basecamp, explained that it is a product certification and was likely to be complementary to our own Framework, and suggesting we have a call to discuss. I had that call with Steve Hanna (Infineon – said Chair, CSA WG) this morning. Neither of us want to add confusion or be seen to be competing hence we discussed how we could complement each other’s work. I think this is possible – indeed, we’ve discussed how to work with 3rd party cert’s and labs numerous times before. I want to make sure I’m on firm ground however and would therefore like to include this as an agenda item on the forthcoming ESB meeting (May 8th, virtual). I include it here as a ‘heads up’ and invite anyone with immediate views (Richard? Haydn?) to ping me so we can pre-discuss before May 8th. That’s all for now - thank you. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org

5 4