IoT Security Testing Guide (ISTG)
summary
Provides a concrete testing framework: a device model mapping hardware and software components, an attacker model with four physical and four authorization access levels, and a test case catalog that links cases to those models. Supplies Markdown and Excel checklists on GitHub and a demo comparing camera versus smart‑home scopes. Claims repeatability and transparency, uses modular component specializations to add Wi‑Fi/Bluetooth specifics, and invites collaborators while noting the current release is a baseline needing expansion.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:50IoT penetration challenges
- 3:12Motivation for standardized testing
- 4:57ISTG methodology development
- 6:41Device model and attack surface
- 8:06Attacker model for IoT
- 11:56Test case catalog structure
- 15:10Demo: Selecting test cases
- 19:21Future ISTG expansion
- 21:26Key takeaways and collaboration
- 22:51Q&A
related talks
26mOWASP IoT Security Testing Guide (ISTG)
53mBuilding a Comprehensive IoT Security Testing Methodology- 53mBuilding a Comprehensive IoT Security Testing Methodology
33mIoT Security: Past, Present and Future
31mEcosystem, Interoperability and Standards: IoT Security
05mIoT Inspector: a platform for real-world smart home research
22mIoT Security: Past, Present and Future
55mthe current problems with IoT security