Building a Comprehensive IoT Security Testing Methodology
summary
Describes a structured, holistic methodology for security testing of IoT product ecosystems, covering technical details and challenges in creating a comprehensive testing program. Focus areas include testing of mobile apps, cloud APIs and web services, network and radio-frequency communication, electronic components, and embedded firmware, using a programmatic, organized approach to cover all facets of IoT security.
AI-written summary · about
chapters (18)
- 0:00RSAConference 2020
- 5:21Security Testing Methodology Structure
- 8:11Functional Evaluation Phase
- 9:23Reconnaissance Phase
- 11:03Testing Phase
- 12:53Management & Control Application Testing
- 15:19Network Testing
- 16:09Embedded Hardware Testing
- 19:21Firmware Analysis Testing
- 21:23Radio (RF) Testing
- 23:52Analysis Phase
- 26:37Enterprise IoT Sensor Technology
- 33:43Consumer Smart Door Lock APIs
- 36:53Basic Entry Level Testing Skills
- 38:09Basic Embedded Testing Lab
- 39:59Training and Exposure
- 42:24Enterprise Consumers of lot
- 45:33Questions
related talks
53mBuilding a Comprehensive IoT Security Testing Methodology
24mIoT Security Testing Guide (ISTG)
40mInternet of Things technologies: risks, challenges and testing
40mInternet of Things technologies: risks, challenges and testing
55mthe current problems with IoT security
37mWhy is IoT security so hard and what can we do about it?
54mSecurity in IoT: Challenges, Vulnerabilities and Countermeasures
31mSecuring the Internet of Things