Common Attacks on IoT Devices
summary
IoT devices still get pwned in the wild — Mirai botnet (2016) DDoS shows consumer devices join attacks en masse — and common practical entry points include exposed UART/JTAG consoles, unencrypted firmware updates over HTTP/FTP, and hard‑coded/base64 credentials. Reverse engineering uses IDA / radare2 / binwalk and automated exploit sets like Metasploit; hardware attacks use ChipWhisperer power analysis and glitching or JTAG to dump flash. Defenses that mattered: per‑device unique secrets, signed firmware with rollback protection, constant‑time checks; a lab demo shows a 500 µs EEPROM brownout window that grants extra attempts.
AI-written summary · about
chapters (8)
- 0:00Introduction to IOT security
- 0:51Understanding IOT devices
- 2:58Software analysis techniques
- 8:12Hardware hacking methods
- 14:43Real world attack examples
- 20:41Defending against attacks
- 23:25Secure development best practices
- 29:11Summary and Q&A
related talks
23mSmart Devices Gone Rogue: IOT Vulnerabilities and Designing For Security
29mSecuring IoT/OT Against Modern Threats
49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors
13mThe dark side of IoT
21mIndustrial IoT security issues and countermeasures
28mThe IoT Hacker's Toolkit
30mWeaponising IoT
29mAttack of the Clone Army