The rapid adoption of the Internet of Things (IoT) and machine-to-machine (M2M) interactions are bringing new challenges to protecting privacy and data. The third WSO2 Summer School class of 2014 will address the security issues around IoT and M2M devices, including hardware challenges, network and encryption, software and cloud challenges, and identity and access control.

The interactive online class, “Security – Your Thing is pwnd – Security Challenges for IoT,” will be led by WSO2 Co-founder and CTO Paul Fremantle. It is being offered at no cost as a part of the WSO2 Summer School 2014 program. The session will be held on Thursday, July 10, 2014 from 9:00 a.m. – 10:00 a.m. Pacific.

To attend the class, register at

Securing the Internet of Things

The class will address the challenges of using widely adopted protocols, such as the Hypertext Transfer Protocol (HTTP), Message Queuing Telemetry Transport (MQTT), and the Constrained Application Protocol (CoAP).

Paul will begin by examining encryption, federated identity, and authorization models. He then will drill down on encryption issues, including discussions of:

  •     Securing MQTT with the Transport Layer Security (TLS) protocol
  •     Facing challenges with the Arduino open-source electronics prototyping platform
  •     Using hardware encryption for microcontrollers

Next, Paul will explore the key privacy requirement of giving users control over how their things collect and share data in user-centric IoT use cases. Additionally, he will discuss the issues with applying protocols, such as OAuth 2.0 and OpenID Connect to the M2M world, as well as review existing proposals and activity for extending M2M protocols to include federated identity concepts. Finally, Paul will explain how to create best practices for IoT security and defend against the hacking of IoT devices.

For architects and developers who want to learn more about IoT best practices, WSO2 has published a white paper, “A Reference Architecture for the Internet of Things.” The paper is designed to provide an effective starting point for addressing the major requirements of IoT projects and systems. It can be downloaded at

About the Presenter

WSO2 Co-founder and CTO Paul Fremantle is also co-chair of the OASIS Web Services Reliable eXchange Technical Committee. Recognized by InfoWorld as a Top 25 CTO, he was responsible for simultaneously leading development of the groundbreaking WSO2 Enterprise Service Bus and Apache Synapse ESB. Paul has played a pioneering role in open source development, beginning with the original Apache SOAP project and his role in leading IBM’s involvement in the Axis C/C++ project. Paul is a member of the Apache Software Foundation, and he previously served as vice president of the Apache Synapse project.

About Summer School 2014

Since 2009, the popular WSO2 Summer School program has helped more than 2,000 enterprise IT architects and developers become more familiar with software technologies and best practices. The all-new classes for 2014 will focus on the latest developments of the Internet of Things, the set of devices and systems that interconnect sensors and actuators (things) to the Internet, which is fast becoming the next major development in IT. Taught by some of the industry’s leading technical experts, the classes offer an opportunity to obtain thousands of dollars worth of professional training at zero cost. To sign up for additional classes or view recordings of past sessions, visit

About WSO2

WSO2 delivers on the promise of the connected business with the only completely integrated enterprise platform that enables businesses to build, integrate and manage their APIs, applications, and Web services on-premises, in the cloud, and on mobile devices. Leading enterprise customers worldwide rely on WSO2’s award-winning 100% open source platform and its robust governance and DevOps functionality for their mission-critical applications. Today, these businesses represent nearly every sector: health, financial, retail, logistics, manufacturing, travel, technology, telecom and more. Visit to learn more, or check out the WSO2 community on the WSO2 Blog, Twitter, LinkedIn, and Facebook.

Trademarks and registered trademarks are the properties of their respective owners.