Couple of points - please respond by Apr 10.
Dear ESB ESB Member Recommendation At the last ESB we discussed how we fortify/evolve the board. Having successfully welcomed Peter Davies, I would like to recommend we now invite Dr. Anna Maria Mandalari to join the board. Who is Anna? Anna is well known to the IoTSF membership as she has presented at IoTSF conferences (2022 and 2023), is an Assistant Professor at UCL and runs an IoT lab. Here’s her last talk: https://www.youtube.com/watch?v=v-_dJsa4lSs And here’s her bio: Anna Maria Mandalari works as Assistant Professor at University College London (UCL). She is member of the UCL’s Academic Center of Excellence in Cyber Security Research (ACE-CSR). She is Honorary Research Fellow at the ISST at Imperial College London. She obtained her PhD as part of the Marie Skłodowska-Curie action, intended for excellent researchers, affiliated with the Carlos III University of Madrid. Her research interests are Internet of Things (IoT), privacy, security, networking and Internet measurement techniques. In addition to her research, Anna is Co-Founder & CTO of a startup providing privacy and security solutions for consumer IoT devices. She gives invited talks all around the world to promote research and create awareness on security, privacy, and ethical AI. Most of her research experiences have also significantly contributed to several EU-funded research projects and have had a strong media impact. I have spoken to Anna on several occasions, observed her work and I am therefore happy to commend her to you. Therefore, please let me know your position by c.o.b Wednesday April 10th – i.e. do you: 1. Agree – (invite her - she’ll make a great addition). 2. Not sure – (hmmm - I have questions/concerns). 3. Dunno – (ok – I have no opinion wither way). Strategic Liaison Recently, the Connectivity Standards Alliance (CSA – nee ‘Zigbee Alliance’) announced a new IoT Device Security specification (https://csa-iot.org/newsroom/the-connectivity-standards-alliance-product-sec...). One of our members made a post on Basecamp asking whether it would add to confusion for manufacturers and whether it might affect our own work with the Assurance Framework. Fortunately, one of its protagonists (Chair of the CSA’s Working Group), is also a member, and on Basecamp, explained that it is a product certification and was likely to be complementary to our own Framework, and suggesting we have a call to discuss. I had that call with Steve Hanna (Infineon – said Chair, CSA WG) this morning. Neither of us want to add confusion or be seen to be competing hence we discussed how we could complement each other’s work. I think this is possible – indeed, we’ve discussed how to work with 3rd party cert’s and labs numerous times before. I want to make sure I’m on firm ground however and would therefore like to include this as an agenda item on the forthcoming ESB meeting (May 8th, virtual). I include it here as a ‘heads up’ and invite anyone with immediate views (Richard? Haydn?) to ping me so we can pre-discuss before May 8th. That’s all for now - thank you. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org
Dear John I fully endorse Anna Maria as a member of ESB. Also I think it’s good that we are engaging so positively with CSA. Great work John. Carsten Professor Carsten Maple Sent from my iPhone On 5 Apr 2024, at 13:21, John Moor <john.moor@techworks.org.uk> wrote: Dear ESB ESB Member Recommendation At the last ESB we discussed how we fortify/evolve the board. Having successfully welcomed Peter Davies, I would like to recommend we now invite Dr. Anna Maria Mandalari to join the board. Who is Anna? Anna is well known to the IoTSF membership as she has presented at IoTSF conferences (2022 and 2023), is an Assistant Professor at UCL and runs an IoT lab. Here’s her last talk: https://www.youtube.com/watch?v=v-_dJsa4lSs And here’s her bio: Anna Maria Mandalari works as Assistant Professor at University College London (UCL). She is member of the UCL’s Academic Center of Excellence in Cyber Security Research (ACE-CSR). She is Honorary Research Fellow at the ISST at Imperial College London. She obtained her PhD as part of the Marie Skłodowska-Curie action, intended for excellent researchers, affiliated with the Carlos III University of Madrid. Her research interests are Internet of Things (IoT), privacy, security, networking and Internet measurement techniques. In addition to her research, Anna is Co-Founder & CTO of a startup providing privacy and security solutions for consumer IoT devices. She gives invited talks all around the world to promote research and create awareness on security, privacy, and ethical AI. Most of her research experiences have also significantly contributed to several EU-funded research projects and have had a strong media impact. I have spoken to Anna on several occasions, observed her work and I am therefore happy to commend her to you. Therefore, please let me know your position by c.o.b Wednesday April 10th – i.e. do you: 1. Agree – (invite her - she’ll make a great addition). 2. Not sure – (hmmm - I have questions/concerns). 3. Dunno – (ok – I have no opinion wither way). Strategic Liaison Recently, the Connectivity Standards Alliance (CSA – nee ‘Zigbee Alliance’) announced a new IoT Device Security specification (https://csa-iot.org/newsroom/the-connectivity-standards-alliance-product-sec...). One of our members made a post on Basecamp asking whether it would add to confusion for manufacturers and whether it might affect our own work with the Assurance Framework. Fortunately, one of its protagonists (Chair of the CSA’s Working Group), is also a member, and on Basecamp, explained that it is a product certification and was likely to be complementary to our own Framework, and suggesting we have a call to discuss. I had that call with Steve Hanna (Infineon – said Chair, CSA WG) this morning. Neither of us want to add confusion or be seen to be competing hence we discussed how we could complement each other’s work. I think this is possible – indeed, we’ve discussed how to work with 3rd party cert’s and labs numerous times before. I want to make sure I’m on firm ground however and would therefore like to include this as an agenda item on the forthcoming ESB meeting (May 8th, virtual). I include it here as a ‘heads up’ and invite anyone with immediate views (Richard? Haydn?) to ping me so we can pre-discuss before May 8th. That’s all for now - thank you. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk<https://www.techworks.org.uk/> https://www.iotsecurityfoundation.org<https://www.iotsecurityfoundation.org/> _______________________________________________ ESB mailing list -- esb@iotsfmm.org To unsubscribe send an email to esb-leave@iotsfmm.org
Hi John, Thanks: a. Agree - (invite her - she'll make a great addition). Kind Regards, Sarb From: John Moor <john.moor@techworks.org.uk> Sent: Friday, April 5, 2024 1:19 PM To: esb@iotsfmm.org Subject: [Esb] Couple of points - please respond by Apr 10. Dear ESB ESB Member Recommendation At the last ESB we discussed how we fortify/evolve the board. Having successfully welcomed Peter Davies, I would like to recommend we now invite Dr. Anna Maria Mandalari to join the board. Who is Anna? Anna is well known to the IoTSF membership as she has presented at IoTSF conferences (2022 and 2023), is an Assistant Professor at UCL and runs an IoT lab. Here's her last talk: https://www.youtube.com/watch?v=v-_dJsa4lSs And here's her bio: Anna Maria Mandalari works as Assistant Professor at University College London (UCL). She is member of the UCL's Academic Center of Excellence in Cyber Security Research (ACE-CSR). She is Honorary Research Fellow at the ISST at Imperial College London. She obtained her PhD as part of the Marie Skłodowska-Curie action, intended for excellent researchers, affiliated with the Carlos III University of Madrid. Her research interests are Internet of Things (IoT), privacy, security, networking and Internet measurement techniques. In addition to her research, Anna is Co-Founder & CTO of a startup providing privacy and security solutions for consumer IoT devices. She gives invited talks all around the world to promote research and create awareness on security, privacy, and ethical AI. Most of her research experiences have also significantly contributed to several EU-funded research projects and have had a strong media impact. I have spoken to Anna on several occasions, observed her work and I am therefore happy to commend her to you. Therefore, please let me know your position by c.o.b Wednesday April 10th - i.e. do you: a. Agree - (invite her - she'll make a great addition). b. Not sure - (hmmm - I have questions/concerns). c. Dunno - (ok - I have no opinion wither way). Strategic Liaison Recently, the Connectivity Standards Alliance (CSA - nee 'Zigbee Alliance') announced a new IoT Device Security specification (https://csa-iot.org/newsroom/the-connectivity-standards-alliance-product-se curity-working-group-launches-the-iot-device-security-specification-1-0/). One of our members made a post on Basecamp asking whether it would add to confusion for manufacturers and whether it might affect our own work with the Assurance Framework. Fortunately, one of its protagonists (Chair of the CSA's Working Group), is also a member, and on Basecamp, explained that it is a product certification and was likely to be complementary to our own Framework, and suggesting we have a call to discuss. I had that call with Steve Hanna (Infineon - said Chair, CSA WG) this morning. Neither of us want to add confusion or be seen to be competing hence we discussed how we could complement each other's work. I think this is possible - indeed, we've discussed how to work with 3rd party cert's and labs numerous times before. I want to make sure I'm on firm ground however and would therefore like to include this as an agenda item on the forthcoming ESB meeting (May 8th, virtual). I include it here as a 'heads up' and invite anyone with immediate views (Richard? Haydn?) to ping me so we can pre-discuss before May 8th. That's all for now - thank you. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 <https://www.techworks.org.uk> https://www.techworks.org.uk <https://www.iotsecurityfoundation.org> https://www.iotsecurityfoundation.org
Hi John, (a) Agree - (invite her - she'll make a great addition). Regards, Prof. Ben Azvine Head of Security Research Distinguished Engineer Applied Research, BT Technology Security and Cyber Defence | Applied Research (bt.com)<https://arview.bt.com/research-themes/security-and-cyber-defence> +44 (0)7710399390 [cid:image001.png@01DA89BA.6FB842C0] This email contains information from the BT Group that might be privileged or confidential. And it's only meant for the person above. If that's not you, we're sorry - we must have sent it to you by mistake. Please email us to let us know, and don't copy or forward it to anyone else. Thanks. We monitor our email systems and may record all our emails. British Telecommunications plc R/O : 1 Braham Street, London E1 8EE Registered in England: No 1800000 British Telecommunications plc is authorised and regulated by Financial Conduct Authority for the provision of consumer credit. From: John Moor <john.moor@techworks.org.uk> Sent: Friday, April 5, 2024 1:19 PM To: esb@iotsfmm.org Subject: [Esb] Couple of points - please respond by Apr 10. Dear ESB ESB Member Recommendation At the last ESB we discussed how we fortify/evolve the board. Having successfully welcomed Peter Davies, I would like to recommend we now invite Dr. Anna Maria Mandalari to join the board. Who is Anna? Anna is well known to the IoTSF membership as she has presented at IoTSF conferences (2022 and 2023), is an Assistant Professor at UCL and runs an IoT lab. Here's her last talk: https://www.youtube.com/watch?v=v-_dJsa4lSs And here's her bio: Anna Maria Mandalari works as Assistant Professor at University College London (UCL). She is member of the UCL's Academic Center of Excellence in Cyber Security Research (ACE-CSR). She is Honorary Research Fellow at the ISST at Imperial College London. She obtained her PhD as part of the Marie Skłodowska-Curie action, intended for excellent researchers, affiliated with the Carlos III University of Madrid. Her research interests are Internet of Things (IoT), privacy, security, networking and Internet measurement techniques. In addition to her research, Anna is Co-Founder & CTO of a startup providing privacy and security solutions for consumer IoT devices. She gives invited talks all around the world to promote research and create awareness on security, privacy, and ethical AI. Most of her research experiences have also significantly contributed to several EU-funded research projects and have had a strong media impact. I have spoken to Anna on several occasions, observed her work and I am therefore happy to commend her to you. Therefore, please let me know your position by c.o.b Wednesday April 10th - i.e. do you: 1. Agree - (invite her - she'll make a great addition). 2. Not sure - (hmmm - I have questions/concerns). 3. Dunno - (ok - I have no opinion wither way). Strategic Liaison Recently, the Connectivity Standards Alliance (CSA - nee 'Zigbee Alliance') announced a new IoT Device Security specification (https://csa-iot.org/newsroom/the-connectivity-standards-alliance-product-sec...). One of our members made a post on Basecamp asking whether it would add to confusion for manufacturers and whether it might affect our own work with the Assurance Framework. Fortunately, one of its protagonists (Chair of the CSA's Working Group), is also a member, and on Basecamp, explained that it is a product certification and was likely to be complementary to our own Framework, and suggesting we have a call to discuss. I had that call with Steve Hanna (Infineon - said Chair, CSA WG) this morning. Neither of us want to add confusion or be seen to be competing hence we discussed how we could complement each other's work. I think this is possible - indeed, we've discussed how to work with 3rd party cert's and labs numerous times before. I want to make sure I'm on firm ground however and would therefore like to include this as an agenda item on the forthcoming ESB meeting (May 8th, virtual). I include it here as a 'heads up' and invite anyone with immediate views (Richard? Haydn?) to ping me so we can pre-discuss before May 8th. That's all for now - thank you. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk<https://www.techworks.org.uk/> https://www.iotsecurityfoundation.org<https://www.iotsecurityfoundation.org/>
Hi John Apologies – this languished in the junk folder for some reason – nothing personal!!! A bit late but … a. Agree – (invite her - she’ll make a great addition). WRT the CSA – thanks for the heads up on the discussion. I agree we should look at how we align more broadly. I noted that PSA is also extending its reach further, and it is probably worthwhile having a conversation with David Maidment at Arm at some point soon to attempt to leverage this rea – although not always easy…. Haydn From: John Moor <john.moor@techworks.org.uk> Date: Friday, 5 April 2024 at 13:20 To: esb@iotsfmm.org <esb@iotsfmm.org> Subject: [Esb] Couple of points - please respond by Apr 10. Dear ESB ESB Member Recommendation At the last ESB we discussed how we fortify/evolve the board. Having successfully welcomed Peter Davies, I would like to recommend we now invite Dr. Anna Maria Mandalari to join the board. Who is Anna? Anna is well known to the IoTSF membership as she has presented at IoTSF conferences (2022 and 2023), is an Assistant Professor at UCL and runs an IoT lab. Here’s her last talk: https://www.youtube.com/watch?v=v-_dJsa4lSs And here’s her bio: Anna Maria Mandalari works as Assistant Professor at University College London (UCL). She is member of the UCL’s Academic Center of Excellence in Cyber Security Research (ACE-CSR). She is Honorary Research Fellow at the ISST at Imperial College London. She obtained her PhD as part of the Marie Skłodowska-Curie action, intended for excellent researchers, affiliated with the Carlos III University of Madrid. Her research interests are Internet of Things (IoT), privacy, security, networking and Internet measurement techniques. In addition to her research, Anna is Co-Founder & CTO of a startup providing privacy and security solutions for consumer IoT devices. She gives invited talks all around the world to promote research and create awareness on security, privacy, and ethical AI. Most of her research experiences have also significantly contributed to several EU-funded research projects and have had a strong media impact. I have spoken to Anna on several occasions, observed her work and I am therefore happy to commend her to you. Therefore, please let me know your position by c.o.b Wednesday April 10th – i.e. do you: 1. Agree – (invite her - she’ll make a great addition). b. Not sure – (hmmm - I have questions/concerns). c. Dunno – (ok – I have no opinion wither way). Strategic Liaison Recently, the Connectivity Standards Alliance (CSA – nee ‘Zigbee Alliance’) announced a new IoT Device Security specification (https://csa-iot.org/newsroom/the-connectivity-standards-alliance-product-sec...). One of our members made a post on Basecamp asking whether it would add to confusion for manufacturers and whether it might affect our own work with the Assurance Framework. Fortunately, one of its protagonists (Chair of the CSA’s Working Group), is also a member, and on Basecamp, explained that it is a product certification and was likely to be complementary to our own Framework, and suggesting we have a call to discuss. I had that call with Steve Hanna (Infineon – said Chair, CSA WG) this morning. Neither of us want to add confusion or be seen to be competing hence we discussed how we could complement each other’s work. I think this is possible – indeed, we’ve discussed how to work with 3rd party cert’s and labs numerous times before. I want to make sure I’m on firm ground however and would therefore like to include this as an agenda item on the forthcoming ESB meeting (May 8th, virtual). I include it here as a ‘heads up’ and invite anyone with immediate views (Richard? Haydn?) to ping me so we can pre-discuss before May 8th. That’s all for now - thank you. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org
participants (5)
-
ben.azvine＠bt.com -
Haydn Povey -
John Moor -
Maple, Carsten -
sarb＠virtuallyinformed.com