Biography

Andy LoPresto has been at Cloudera (previously Hortonworks) since 2015, where he currently leads the Data In Motion Security team. In this role he serves as both a Committer and Project Management Committee (PMC) Member for Apache NiFi, an open source, robust, secure data routing and delivery system. Andy focuses on security concerns within NiFi including identity management, TLS negotiation, data protection, access control, encryption and hashing. Andy is also involved with the sub-projects — Apache MiNiFi, which drives edge data collection, including secure command and control and immediate data provenance and governance; and Apache NiFi Registry, which provides complementary applications for flow versioning, development to production lifecycle, asset management, and extension library services. Over the last few years, he has presented about NiFi and MiNiFi in Singapore, Tokyo, Melbourne, Berlin, Sydney, Brussels, and the US.

Talk

Secure IoT Command, Control, and Exfil with Apache MiNiFi

Apache MiNiFi is a lightweight application which can be deployed on hardware orders of magnitude smaller and less powerful than the existing standard data collection platforms. Not only can this data be prioritized and have some initial analysis performed at the edge, it can be encrypted and secured immediately. Local governance and regulatory policies can be applied across geopolitical boundaries to conform with legal requirements. And all of this configuration can be done from central command & control using an existing Apache NiFi instance with the trusted and stable UI data flow managers already love. Recent events (Mirai, Dyn DDOS, etc.) have demonstrated the power of distributed botnets consisting of unsecured IoT devices and reinforced the need to securely command and control IoT devices while also ensuring data is only made accessible to authorized parties.

Session Keywords