Keynote: Outsmarting IoT Defense: The Hacker's Perspective
summary
Claim: stop exploit chains on-device by fingerprinting exploitation techniques rather than chasing CVEs. Evidence: runtime exploitation fingerprint engine that detects memory corruption, command injection and execution‑flow manipulation, reports the exact line to patch, and runs with <3% overhead. Contextual numbers: ~2,000 new CVEs per month, 70% of patch Tuesdays are memory bugs, static analysis misses ~50%, ~15 vulns per 1,000 LOC. Deployed by Sternum on millions of devices in medical, industrial and consumer IoT and blocks real attacks in real time.
AI-written summary · about
chapters (8)
- 0:00Introduction to hacking
- 1:06The IoT security challenge
- 3:30Limitations of current tools
- 7:16Attack vectors and strategies
- 10:36The case for real-time defense
- 14:45Exploitation fingerprinting
- 17:27Operationalizing protection
- 19:14Conclusion and platform overview
related talks
32mCommon Attacks on IoT Devices
29mSecuring IoT/OT Against Modern Threats
42mKeynote: The Expanding Universe of Cyber Threats
48mKeynote:If It's Smart, It's Vulnerable
01h 06mKeynote: Devaluing Attack: Disincentivizing Threats Against The Next Billion Devices
47mTrend Micro's VP of security research reveals the latest IoT threats and how to combat them
58mKeynote: What Got Us Here Wont Get Us There
31mIoT Bug Hunting: From Shells to Responsible Disclosure