Securing The Internet Of Things
summary
List of concrete failures and fixes not slogans: a fart-measuring device and a two-hundred-dollar cup expose trivial data collection; sensors behave as unvalidated input; widgets run on AVR/Arduino/Raspberry Pi/Linux and often lack CPU/TPM to do RSA>512 or manage crypto keys; firmware updates arrive unsigned or unencrypted; back-end services mine and monetize data; recommend CWE mapping, ASVS-level testing, bug bounties, and treating firmware/encryption pragmatically; flag Pebble watch health data as potential HIPAA-like risk and add insufficiently open platforms to threat models.
AI-written summary · about
chapters (22)
- 0:00Intro
- 1:45Who am I
- 2:44The world has changed
- 5:58Smart kettle
- 6:40Vessel
- 7:30Smart Socks
- 8:30Defining IoT
- 8:50Common IoT verticals
- 11:00IoT technologies
- 13:40Sensors
- 18:10Frontend Web App
- 20:28Backend Web App
- 21:10Monetisation
- 22:10Malachite
- 27:06I WASP Problems
- 28:37Security Configuration Options
- 32:25Insecure Firmware
- 33:08Encryption
- 34:50Poor Physical Security
- 36:03Freedom To Tinker
- 37:42Open Project
- 38:37Fart Calculator
related talks
30mVulnerabilities in the Internet of Things
33mThe Internet of (Better) Things
25mThe Ethics of the Internet of Things
01mThe Internet of "Insecure" Things
44mNight of the living vulnerabilities
29mSecuring IoT/OT Against Modern Threats
31mSecuring the Internet of Things
41mUnique Challenges Of Security Programs For Hardware/IoT Makers