Trust in the edge, trouble in the cloud
summary
Claims that an IoT compromise often bypasses devices and hits the backend: an open S3 bucket exposes 2.7 billion records including Wi‑Fi passwords. Demonstrates four attack vectors — reverse engineering, API exposure, cloud misconfiguration and session hijack — with tooling largely free, timelines from a few hours to two days and attacker skill from low to moderate. Recommends threat modeling at design, developer security training, cloud configuration reviews, regular vulnerability scanning and targeted penetration tests plus a simple app certification for non‑technical buyers.
AI-written summary · about
chapters (11)
- 0:00IoT security gaps
- 1:46Regulatory blind spots
- 3:11IoT breach via cloud
- 7:20Cyber attack tactics
- 10:52Mobile app reverse risks
- 12:58API exposure and exfiltration
- 14:00Cloud misconfiguration dangers
- 17:10Session hijacking
- 19:37Defending apps in dev cycle
- 22:48Ongoing testing and certification
- 24:54Q&A
related talks
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
50mAvoiding cloud security anti-patterns the right way
31mNext-Gen IoT Botnets 3: Bad Implementations of Good Cloud Platforms
32mCommon Attacks on IoT Devices
29mSecuring IoT/OT Against Modern Threats
26mThreat Modeling for IoT
40mSecurity/Privacy in the IoT generation
46mStories from the cutting edge: Cloud security in 2023