Embedded Linux Conference & OpenIoT Summit North America 2018

After several high-profile attacks initiated from IoT devices have impacted the internet ecosystem, the security of internet connected devices is gaining more scrutiny. Security flaws are in IoT devices are common and, as a community, we need to address this emerging threat to our industry. The talk will focus on how to accurately assess the security controls of IoT designs end to end. Leveraging OWASP threat modeling, we will outline guiding principles IoT device creators should consider in their designs. We will also identify methods that can be leveraged to enhance the security and reliability of IoT devices. This includes prioritizing security controls, device hardening, firmware signing, software hardening, transport security, backend systems, secure data storage, secure firmware updates and life cycle management considerations.