MODULE 4- iot

The Historical Development of Operational Technology

Operational Technology has come a long way from its early days in the industrial revolution to
the sophisticated digital era of today. Initially, OT was all about mechanical systems and analog devices.
Think of the steam engines and telegraph systems of the 18th and 19th centuries, where control
over machines was mostly manual or involved simple mechanical contraptions. This era set the
foundation for automation and control of physical processes.
As technology evolved through the 20th century, there was a significant shift from these
purely mechanical systems to electronic and digital ones.
The introduction of electronic components like transistors and microprocessors revolutionized OT.
This marked a move towards precision, reliability, and the capacity to handle increasingly complex
tasks. Digital systems allowed for finer control over industrial processes and paved the way for larger-
scale automation.
The real transformation in OT, however, began with its integration with computer technology. In the late
20th century, the advent of computer-based control systems, such as Programmable Logic Controllers
(PLCs) and Supervisory Control and Data Acquisition (SCADA) systems, marked a new era.
.

Hardware Used in Operational Technology

The hardware in OT includes devices like sensors, actuators, and controllers.
•
 • Sensors: Detect environmental parameters like temperature, pressure, or motion. • Actuators:
Perform physical actions based on commands, such as moving parts or opening valves. •
Controllers: Devices like Programmable Logic Controllers process data from sensors and instruct
actuators.
This hardware forms the physical backbone of OT, enabling real-time interaction and control of
industrial processes.
Software Components
Software plays a role in controlling and monitoring operations. Essential software components are:
• Control System Software: Programs controllers to respond to sensor inputs and manage
actuators. • Monitoring Tools: Provide user interfaces for real-time data visualization and manual
control. The software ensures that OT systems are not only automated but also manageable and
efficient, allowing for human oversight and intervention when necessary.
Networks and Connectivity in Operational Technology
Connectivity is necessary in modern OT systems. Networks in OT enable communication between
various hardware components and software systems. This can be through wired connections like
Ethernet or wireless technologies like Wi-Fi and Bluetooth.
The network ensures that data flows seamlessly from sensors to controllers and then to actuators,
as well as to monitoring tools for human oversight.
In recent years, the trend toward the Industrial Internet of Things (IIoT) has further emphasized
the importance of connectivity in OT, allowing for more integrated, smart, and responsive systems.
Securing OT systems involves a multi-layered approach:
1. Regularly Updating and Patching: Keeping all software and firmware up to date to protect
against known vulnerabilities.
2. Segmentation of Networks: Separating OT networks from IT networks to limit the spread of
potential cyber threats.
3. Access Control: Implementing strict access control measures to restrict who can interact with
the OT systems.
4. Continuous Monitoring: Actively monitoring networks and systems for unusual activities or
potential threats.
5. Employee Training: Ensuring that all personnel are trained in cybersecurity best practices
relevant to OT.

An air gap in IoT is a security measure that physically or logically isolates critical devices and
networks from unsecured networks (like the internet) to prevent unauthorized access and
cyberattacks. By removing all direct wired or wireless connections, it creates a "gap" that ensures
data cannot be transferred remotely.

insecure protocols in Operational Technology (OT) and industrial environments, here are two
commonly used, insecure protocols:
1. Modbus (RTU/TCP): Modbus is widely used in SCADA and PLC systems but was not
designed with security in mind. It lacks native authentication, encryption, or integrity
checks, making it vulnerable to eavesdropping, man-in-the-middle (MitM) attacks, and
replay attacks.
2. Telnet: A legacy protocol still found in many OT networks for remote device management.
It is inherently insecure because it transmits data, including usernames and passwords, in
cleartext

Security Priorities: Integrity, Availability, and Confidentiality

In an IT realm, the most critical element and the target of attacks has been information. In an OT
realm, the critical assets are the process participants: workers and equipment.
Security priorities diverge based on those differences. In the IT business world, there are legal,
regulatory, and commercial obligations to protect data, especially data of individuals who may or
may not be employed by the organization. This emphasis on privacy focuses on the confidentiality,
integrity, and availability of the data—not necessarily on a system or a physical asset
. The impact of losing a compute device is considered minimal compared to the information
that it could hold or provide access to.
By way of comparison, in the OT world, losing a device due to a security vulnerability means
production stops, and the company cannot perform its basic operation.
Loss of information stored on these devices is a lower concern, but there are certainly
confidential data sets in the operating environment that may have economic impacts, such
as formulations and processes.
In an operational space, the safety and continuity of the process participants is considered the
most critical concern. Thus, the goal is the continued uptime of devices and the safety of the
people who operate them. The result is to emphasize availability, integrity, and confidentiality.
The impact of loss here extends even to loss of life.

Security priorities differ fundamentally between Information Technology (IT) and Operational
Technology (OT), often described as a reversal of the standard CIA triad (Confidentiality, Integrity,
and Availability).

1. Information Technology (IT) Priorities

IT security focuses on the protection of digital data and information processing systems

Confidentiality (High Priority): Ensuring sensitive data (customer info, financial records) is protected
from unauthorized access.

Integrity: Maintaining the accuracy and completeness of data to prevent tampering.

Availability: Ensuring authorized users can access systems; however, brief downtime is often
tolerated for patching or security updates.

2. Operational Technology (OT) Priorities

 OT security focuses on the safe and continuous operation of physical processes (e.g., power grids,
factories).

Availability (Highest Priority): Systems must run 24/7. Any downtime can lead to massive revenue
loss, service outages, or physical danger.

Safety & Reliability: Preventing physical harm to people, equipment, and the environment. This is
often non-negotiable.

Integrity: Ensuring that control commands and sensor data are accurate to prevent hazardous
physical outcomes.

Confidentiality (Low Priority): Protecting data privacy is generally secondary to maintaining

operational
control.

In this section, we present a brief review of two such risk assessment frameworks:
• OCTAVE (Operationally Critical Threat, Asset and Vulnerability Evaluation) from the Software
Engineering Institute at Carnegie Mellon University
• FAIR (Factor Analysis of Information Risk) from The Open Group

OCTAVE (Operationally Critical Threat, Asset and Vulnerability Evaluation:

 OCTAVE Allegro: A more modern, streamlined version focusing on the information asset's
environment

Here is a breakdown of how those phases function within a formal risk analysis:
1. Establish Drivers
In this initial stage, the organization defines its Risk Measurement Criteria. Since "risk" means
different things to different departments, this phase ensures everyone agrees on how to measure
impact.
• Qualitative Scales: Defining what constitutes a "Low," "Medium," or "High" impact.
• Impact Areas: Deciding if the organization cares more about financial loss, reputation, or
health and safety.
2. Profile Assets
This phase shifts the focus to the Information Assets. Unlike traditional IT audits that look only at
hardware, this stage documents the full lifecycle of the data.
• Asset Containers: Identifying where the data "lives"—is it on a server (Technical), in a filing
cabinet (Physical), or in an employee's head (People)?
• Security Requirements: Defining the Confidentiality, Integrity, and Availability (CIA) needs for
each asset.
3. Identify Threats
Once the assets and their containers are known, you identify what could go wrong. OCTAVE Allegro
uses Threat Trees to visualize potential problems.
• Threat Actors: Distinguishing between internal/external and accidental/intentional threats.
• Probability vs. Possibility: Evaluating the likelihood of a threat exploiting a specific container.
4. Identify and Mitigate Risk
This is the "So what?" phase. You calculate the risk score and decide how to handle it.
• Risk Scoring: Combining the impact (from Step 1) with the threat (from Step 3) to get a final
risk value.
• Mitigation Strategy: Choosing one of the four classic risk responses:
1. Accept: The risk is within the organization's appetite.
2. Mitigate: Apply controls to reduce the risk.
3. Transfer: Use insurance or outsourcing to shift the burden.
4. Avoid: Stop the activity causing the risk entirely

• Phase “Establish Drivers” aims to justify and prioritize the measurement criteria for risk for
a specific organization.
• Phase “Profile Assets” is designed to identify and document logical, technical, physical and people
assets.
• Phase “Identify Threats” focuses on the identification of threats against the identified assets.
• Phase “Identify and Mitigate Risk” supports the valuation of the risks posed against the critical
information assets. Finally, after this step, the mitigation strategy for each of the identified risks is
defined.

FAIR (Factor Analysis of Information Risk) :

Components of the FAIR Framework

• Threats
They can be any object, action, person, or element, capable of harming a resource or asset.
A threat is anything capable of causing direct or indirect harm to an asset.

• Assets
Assets could be tangible or intangible. All the data-driven devices that an organization is using to
process data are tangible assets. It involves computers, laptops, servers, and so on. The Data file is an
example of an intangible asset. Both should be part of the security analysis as they both can be under
attack and cause huge damage.

• Organization
The third component of FAIR assessment is an organization which refers to the entity under
observation. It could be a start-up, enterprise, or small-scale business. Basically, an organization is
one where a group of people work and exchange a huge deal of data.
If organizations are not concerned about protecting that information, its profitability, brand value,
and credibility could be compromised severely. Depending upon the seriousness of the risk, an
organization can cease the operational functionality completely.
As organizational information is always at risk, FAIR risk methodology can help to protect it. With its
help, organizations gain insights to identify direct and indirect information risks correctly.

• The External Environment

The last FAIR methodology component is the external environment of an organization. The external
factors are those that are beyond the authorization area of an organization. Mostly, it includes
regulatory frameworks, legislative roadblocks, and industry competitors.

Iot blueprint for public safety

• Public safety means providing security for all the people living in the country.

• It includes fields such as social welfare, environmental protection and national defense.

• IOT technology is capable of increasing the efficiency of any public safety system
connecting smart devices, collecting, processing and displaying data received from
them

• The received data can be used for making timely decisions and reacting to any
 possible treat effectively

• Mission continuum

• At the top of the blueprint, six types of communication locations and devices
ensure the mission continuum

• Remote offices and fixed sites

these are fixed locations sch as police stations ,fire stations

,school building that supports the mission

• Mobile command center and emergency communication sites

mobile command center is a specialized vehicle such as bus,
trailer, van designed to serve as a centralized workspace and storage area for equipment

It provides workspaces, computers, internet connectivity, telephone systems

and other communication tools

MCC act as a mobile hub for communication, coordination and decision making during
emergencies, disasters
• Land ,air and sea mobile vehicles

these mobile platform requires connectivity in

motion Eg: cars, trucks ,buses, boats and aircraft that support public

safety mission

These vehicles are equipped with multiple sensors and smart objects such as cameras and
specialized devices.

Technologies for these devices are designed to deal with harsh environments in which
 temperature, vibration ,humidity can range widely.

• Mobile agents and wearable communication

are software entities that executing tasks on behalf of users

or applications

Wearable communications-gadgets worn on body tat enable communication,

data exchange and interaction

Eg: fitness trackers-monitor health metrics like heart rate, sleep

patterns Smart watches: provide notifications, fitness tracking and

voice calls

• Citizen to authority services and collaboration

Refers to interaction between citizens and government authorities,

facilitated by technology

Government websites: citizens can access information, submit forms

Mobile apps: apps for services like paying taxes, renewing licenses or reporting issues

• sensors

these are devices and things that collect information for public safety mission

• Mission fabric

• The mission fabric also ensures that access to resources in the cloud is uniform and
agnostic to cloud type (public, private, or hybrid). In any of these configurations, the
applications should have the same level of accessibility to the end users.
• Similarly, tools such as data collection, reporting, and analytics tools should be
extensible across the public safety enterprise.

Public cloud -infrastructure and services are owned and operated by 3rd party provider and
made available to public over the internet

Pay for what you use

Eg:AWS amazon web services

Private cloud—owned and operated by single organization

Accessed by only authorized users within that

organization Hybrid_- combination of both public

and private cloud

 • Inter agency collaboration

Refers to process of multiple organizations or agencies working together towards a

common purpose or goal

PSAPs- public safety answering

points Where emergency calls

are answered EOCs- emergency

operation centers

Where representatives from one or more agencies meet to coordinate their

response to emergencies
Fusion centers—centers that collect ,analyze and disseminate information to local

agencies LMRS—land mobile radio services

Manage mission critical voice communication across one or more local agencies

Emergency response iot architecture

[iot blueprint for public safety can be included]

IoT Architecture Components for Multi-Modal Emergency Response

• 1. Sensing/Perception Layer (Mobile Units):
o Land Vehicles (Ambulances, Fire Engines, Police Cars): Equipped with GPS/GNSS for
tracking, accelerometers for accident detection, and CAN bus sensors to monitor
vehicle health and speed.
o Air Vehicles (UAVs/Drones): Act as mobile sensor platforms for aerial surveillance,
disaster mapping, and monitoring, particularly useful in areas inaccessible to land
vehicles.
o Sea/Marine Vehicles: Equipped with GPS, marine sensors for water conditions, and
communication systems.
o Wearable Devices: Track the health and location of first responders.
• 2. Communication/Network Layer (Heterogeneous Networking):
o Uses a hybrid approach combining 5G/LTE for high-bandwidth (video) and LoRaWAN
or NB-IoT for long-range, low-power communication in rural or damaged infrastructure
areas.
o V2X (Vehicle-to-Everything): Enables communication between vehicles, infrastructure
(traffic lights), and drones.

• 3. Edge Computing Layer (Real-Time Processing):

o Raspberry Pi or specialized gateways inside vehicles process data on the spot to reduce
latency.
o Initial AI inference (e.g., collision detection) occurs here, ensuring immediate action
(triggering alerts, controlling traffic lights) without waiting for cloud processing.

• 4. Cloud/Control Layer (Storage & Analytics):

o Centralized platforms (e.g., AWS IoT, Microsoft Azure, or custom SQL servers) store
data from all modes.
o AI/ML models analyze historical and real-time data to optimize routes, predict
disaster spread, and manage resource allocation.

• 5. User/Application Layer (Dashboard & Decision Support):

o GIS-based dashboards for control rooms (mapping, location tracking).
o Mobile applications for field responders.
o Automated alert generation for emergency contacts.

Network and security services in mobile vehicles are critical components of modern
intelligent, connected, and software-defined vehicles. These services ensure that the vast
amount of data generated by over 100-150 electronic control units (ECUs) and external
connections—such as Vehicle-to-Everything (V2X) and cellular IoT—is transmitted securely,
efficiently, and reliably to prevent unauthorized access or malicious interference.

1. In-Vehicle Network (IVN) Services

Modern vehicles rely on internal networks to coordinate subsystems (powertrain, braking,

ADAS, infotainment). The primary networking technologies include:

• Controller Area Network (CAN/CAN-FD): The de facto standard for communication between
ECUs due to its robustness, low cost, and reliability. It is widely used for critical systems like
braking and engine control.

• Automotive Ethernet: High-bandwidth networking (100 Mbps to 25 Gbps) essential for

advanced driver assistance systems (ADAS), high-resolution sensors (cameras/LiDAR), and
infotainment.

• Local Interconnect Network (LIN): A low-cost, single-wire network used for non-critical,
slower systems like seat adjustments or window motors.

• In-Vehicle Gateways: Act as central hubs to connect different network segments, manage
data flow, and provide firewall protection to prevent, for example, a compromised
infotainment system from accessing critical braking systems.

• Network Security Monitoring (Cybersecurity): The collection and analysis of network data
(logs, traffic) to detect, analyze, and respond to security threats or, in other words, to identify
 unauthorized activity.

2. Vehicle Communication Services (External)

Vehicles connect to the outside world through several channels to enable smart features
and over-the-air (OTA) updates:

• Cellular IoT (4G/5G): Connects the vehicle to the cloud for telematics, remote diagnostics,
and real-time processing

• V2X (Vehicle-to-Everything): Includes V2V (Vehicle-to-Vehicle) and V2I (Vehicle-to-

Infrastructure) to share safety data about traffic, hazards, and road conditions.

• Wi-Fi and Bluetooth: Used for connecting user devices (smartphones/laptops) and for short-
range communication with local infrastructure.

• Secure OTA Updates: Enables remote firmware and software updates, ensuring that patches
are digitally signed and verified to prevent "bricking" or malicious manipulation.

3. In-Vehicle Security Services

As connectivity increases, so does the risk of cyberattacks. Security services are

implemented to protect against hacking, data theft, and unauthorized access:

• Intrusion Detection and Prevention Systems (IDPS): Automotive-grade IDS/IPS constantly

monitor network traffic (CAN, Ethernet) for anomalies, unauthorized access attempts,
protocol violations, and malicious patterns.

• Secure Gateway (Firewall): Acts as a barrier between the external, untrusted world (like the
internet or OBD-II port) and the critical internal network.

• Secure Boot and Hardware Security Module (HSM): Ensures only authentic software runs on
ECUs and provides secure storage for cryptographic keys and credentials.

• Authentication and Encryption: Uses mechanisms like MACsec (Media Access Control
security) on Ethernet and message authentication codes to ensure that only authorized
devices can communicate and that data is not tampered with during transmission.

• Data Privacy Protection: Implements techniques such as data anonymization, encryption, and
strict data access policies to protect the personal information of drivers.

The erosion of network architecture refers to the phenomenon where the initially designed, structured,
and secure network infrastructure gradually degrades over time due to ad-hoc, uncontrolled, and
individual changes. This process leads to a divergence between the intended architecture (how the
network was designed to operate) and the implemented architecture (how it actually operates).
:
Key Causes of Architecture Erosion
• Ad-hoc Changes: Individual modifications, such as adding a new switch, router, or IoT device
without considering the overall network design, slowly break the original architecture.
 • Poor Maintenance Practices: Neglecting regular updates, documentation, or adhering to
established standards leads to security gaps and structural weaknesses.
• Increased Complexity: As networks grow to support more devices (e.g., IoT), the complexity
increases, making it harder to maintain a clean, secure, and efficient structure.
• Legacy System Integration: Connecting new, modern, and potentially insecure devices to old,
legacy systems often creates security risks.

Signs and Symptoms of Erosion

• Inefficient Data Flow: Increased latency, unexpected bottlenecks, or data packets taking non-
optimal paths.
• High Maintenance Costs: The network becomes difficult to troubleshoot, upgrade, or manage,
leading to increased operational efforts.
• Security Vulnerabilities: The emergence of new, unexpected attack surfaces due to
unmonitored connections.

Impact on Network Security

Architecture erosion is a significant threat to, for example, Industrial IoT (IIoT) environments. As a
"solid" design is eroded, it becomes easier for unauthorized access, malware, or denial-of-service
attacks to compromise critical infrastructure. It creates a scenario where the network is "secure by
design" on paper, but "insecure by implementation" in reality.
Cisco Press +4
Prevention and Mitigation
• Intent-Based Networking (IBN): Utilizing modern network architectures that take high-level
business goals as input and automatically configure the network to meet those goals,
constantly monitoring for compliance.
• Strict Segmentation: Enforcing rigid segmentation between different zones (e.g., IT and OT)
using next-gen firewalls and data diodes to maintain the integrity of the control network.
• Documentation and Control: Maintaining up-to-date documentation of the network structure
and implementing strict change management procedures to ensure no change is made without
a full impact analysis

Modern mobile vehicles (cars, trucks, buses) have transitioned from simple mechanical machines
to "computers-on-wheels" or software-defined vehicles. This transformation relies on a combination
of onboard high-performance computing (edge) and cloud-based services to enhance safety,
convenience, and functionality.

1. Compute Infrastructure in Vehicles

Modern vehicles utilize sophisticated hardware to process large amounts of data in real-time.
• Onboard Computers (Edge): Vehicles are equipped with high-performance Electronic Control
Units (ECUs), Graphic Processor Units (GPUs), and AI accelerators (e.g., NVIDIA Drive) to handle
sensor data from cameras, LiDAR, and radar.
• Vehicular Edge Computing (VEC): To reduce latency, critical computations—such as accident
prevention—are processed locally within the vehicle or in nearby road-side units rather than
in a distant cloud.
• Vehicle-to-Everything (V2X): Vehicles communicate with other vehicles (V2V), infrastructure
(V2I), and pedestrians (V2P) using 5G and C-V2X (Cellular Vehicle-to-Everything) technology to
improve situational awareness.
Key Components of V2X Communication:
 • V2V (Vehicle-to-Vehicle): Vehicles share data on speed, position, and direction to prevent
collisions,

• V2I (Vehicle-to-Infrastructure): Vehicles communicate with traffic signals, road signs, and
sensors, facilitating better traffic flow.

• V2P (Vehicle-to-Pedestrian): Enables communication between vehicles and

pedestrians/cyclists (via smartphones or wearables), increasing safety for vulnerable road
users.

• V2N (Vehicle-to-Network): Connects vehicles to cloud-based, real-time data for traffic

updates and navigation

2. Key Application Services

Applications in modern vehicles fall into several categories:
• Advanced Driver Assistance Systems (ADAS) & Autonomous Driving: Features like lane-
keeping assist,and automatic emergency braking are enabled by AI-driven, real-time sensor
processing.
• In-Vehicle Infotainment (IVI): Streaming media, navigation, voice assistants (e.g., Apple
CarPlay, Android Auto), and passenger entertainment systems.
• Predictive Maintenance & Diagnostics: Sensors continuously monitor vehicle health (engine,
battery, tire pressure) and send alerts to drivers or dealers, reducing breakdown risks.
• Over-the-Air (OTA) Updates: Software updates can be pushed directly to the vehicle to
enhance features or patch security vulnerabilities without visiting a workshop.

3. Benefits and Challenges

• Benefits: Increased safety (collision avoidance), higher efficiency (optimized routing),
enhanced passenger experience, and new revenue models (on-demand features).
• Challenges: The need for low-latency, ultra-reliable networks (5G), data security/privacy
(preventing hacks), and managing the immense volume of data generated

IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) are network security
technologies. IDS is a passive tool that monitors traffic and alerts administrators to malicious activity,
while IPS sits inline to actively detect, block, and prevent threats in real-time. Both use signature-based
detection to safeguard network integrity.

ICCP (Inter-Control Center Communications Protocol)

ICCP, also known as IEC 60870-6 or TASE.2 (Telecontrol Application Service Element 2), is a standard
protocol used to exchange data between different control centers, utilities, and regional power pools.

• Key Features & Usage:

o Purpose: Facilitates Wide Area Network (WAN) communication, specifically for real-
time monitoring and control between high-level systems, rather than direct device
control.
o Data Exchange: Used to share information like power grid measurements, generation
data, and network topology.
o Relationship to DNP3: While DNP3 often connects a Master to an RTU, ICCP connects
a Master to another Master (Server-to-Server).
 o Standardization: It is part of the IEC 60870-6 family of standards.

IOT public safety information processing

School bus safety

1. Bus location and student onboarding or off boarding

2. Driver behavior reporting

3. Video surveillance

4. student wi-fi

Bus location and student onboarding or off boarding:

One large problem that parents and school personnel face every day is knowing where a bus
is located and whether a student is on the bus. This can become an even larger problem in
school districts that are spread over large geographic areas and have a bus depot where
students must change buses. A school transportation director’s day is often not completed
until every student is accounted for and all the buses have returned to the bus yards. In many
situations, a parent, expecting his or her child to be at home, calls the transportation office
looking for a student. Without the aid of IoT, transportation office personnel have to make
phone or radio calls to determine whether a student is on the bus. In many cases, the bus
driver may not know for sure (perhaps it is a substitute driver who doesn’t know all the
students). There’s a good chance that the student never boarded the bus that day (maybe the
student stayed at school for after school learning or activities), or perhaps the student
disembarked the bus at a friend’s house. With the assistance of IoT, the transportation director
can know, in real time, the exact location of a bus, which students are on the bus, and where
students exited or entered the bus. Now, when a parent calls looking for his or her child, the
transportation director can say, “Your child exited the bus at the corner of Smith and Jones
Streets at 3:30 p.m.” Or, perhaps the transportation director can say, “Your child did not get on
the
bus today.”

Driver behavior reporting

Another advantage of having location and telematics information is to monitor bus driver
behavior. For instance, if a bus driver exceeds a safe speed, the transportation director can be
alerted. This alert can occur in real time or can be recorded in a database. At one deployment, a
concerned parent called the school and reported that he had been driving behind an activity
bus a few days prior, and the bus had been driving at an unsafe speed. School personnel were
able to review the entire history of the bus route and found that the bus was, indeed, traveling
too fast.
.Video surveillance

One of the most widely used features of the school bus safety solution is video surveillance.
Video surveillance can be used to monitor student safety on the bus and also to record what
happens outside the bus in the event of an accident or a driver illegally passing a stopped
school bus. A common case is a parent calling a school to report that her child witnessed
bullying behavior, a fight, or a weapon on the bus. School personnel can watch forensic video
from the day/time in question to determine what actually occurred. The video is also available
for live viewing by school personnel. student wi-fi

Some students are on a bus for over two hours per day, which can be valuable studying time.
Wi-Fi can be provided to allow students to do homework on the bus

Application of iot in home automation systems

Smart homes

Heating

Smart home products now allow for greater control over heating devices including when
products are turned on, turned off, and controlled. Smart products may be armed with
temperature or humidity sensors to automatically turn on or off if certain criteria are met.
This line of smart home innovations also extends to air conditioners.

Lighting

Lights can be switched on and off, placed on a schedule, or set to change based on sunrise or
sunset times. Like some more traditional products, lights can often set to change based on
motion. Smart bulbs can communicate over Wi-Fi and display statistics or metrics to your
phone.

Audio/Visual
One of the more fun aspects of smart homes, many entertainment products are now heavily
connected to each other and can be controlled with a single remote. Television and speakers
now have greater capabilities to be played on command using applications, including being
maintained on a schedule or being voice-controllable.

Security

One of the most reasonable aspects of a smart home is the enhanced security capabilities.
 Many products now have camera capabilities that track motion, capture video, or allow for
live video feeds. This may be installed to sync with a ringing doorbell or set to display on
certain areas of your property. These videos may allow for video-calling with the individual at
your door, including audio capabilities.

Many smart homes are also refit with modern security kits. This includes motion sensor
detectors when individuals should not be home, home monitoring, notifications and alerts
of suspicious behavior, and the ability to lock doors or windows remotely using a phone.

1 MARK
Define 'air gap '
Define the logic of “security through obscurity,”
List any 2 Insecure Operational Protocols used in OT
Expand DNP3
Expand ICCP
is/are the critical elements of IT
is/are the critical elements of OT
Expand OCTAVE
Expand FAIR
Expand IDS and IPS
Expand NSM
What is PSAPs ?
What is EOCs ?
What is LMRS ?
Give an application for IoT Public Safety Information Processing

2 MARK
List out any 4 challenges in OT security
Write short note on Modbus protocol
How IT and OT vary based on Security focus
How IT and OT vary based on Security priorities
List out the steps in OCTAVE
Mention the 3 outputs or decisions to be taken at final stage of OCTAVE
What is NSM ?
List the new categories of IoT with respect to Public safety
List any 4 communication locations and devices that ensure the mission continuum
List the public safety agencies that comes under Interagency collaboration
Write short note on the Network and Security Services in mobile command centre
Write short note on the Compute and Applications Services in mobile command centre
Write short note on the Network and Security Services in mobile vehicles
Write short note on the Compute and Applications Services in mobile vehicles
What is the role of Bigdata in IoT Public Safety Information Processing
What do you mean by School bus safety with respect to IoT ?
4 MARK
Explain Erosion of network architecture
How does the device insecurity affect the OT system security
How does the security focus and security priorities vary with respect to OT and IT
Write short note on OCTAVE
Write short note on FAIR
How is IoT related to Public safety ?
Describe different types of smart objects in Public safety
Explain the Public and Private Partnership for Public Safety IoT
Explain Mission Continuum
Explain mission Fabric
Explain about the Inter-agency Collaboration in IoT Public safety
Write a short note on Mobile command centre
Explain the network and security services in Mobile command centre
Explain the compute and application services in Mobile command centre
Write a short note on Mobile vehicles
Explain the network and security services in Mobile vehicles
Explain the compute and application services in Mobile vehicles
Explain the IoT Public Safety Information Processing
Explain in detail the School bus public safety

15 MARK
Explain the common challenges in OT
Explain in detail how IT and OT security practices and system vary
Explain any 2 Formal Risk Analysis Structures
Explain the IoT Blueprint for Public safety
Explain the Emergency response IoT architecture