IoT Lockdown - Battling Bot Net Builders
Talkat Embedded Linux Conference + OpenIoT Summit North America 2017 · on Wednesday, 2017-02-22· at 16:20· Galleria North·
summary
Describes the Mirai-class DDoS that peaks at 1.2 Tbps using about 380,000 devices and lists concrete defenses: eliminate default credentials by per-device randomized passwords, remove unused services (no local SMTP/FTP/SSH), use minimal Linux images or Yocto builds, enforce strong password hashing (PBKDF2/bcrypt/argon2), require signed firmware updates and certificate pinning for TLS, encrypt stored and transit data, add rate limiting/honeypots to detect scanners, and plan an authenticated, secure patch/rollback mechanism.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:39Dyn DNS DDOS Attack
- 4:23Security Benefits of Embedded Linux
- 5:24Remember Two Things
- 7:43Know Your Adversary
- 13:22Operating System Security Patching strategy Minimal distribution
- 16:47File System Security
- 18:52Service Security
- 21:20Network Layer Security
- 24:24Application Security
- 25:32Sensitive Data Exposure
- 27:41Certificate Verification via Fingerprint
- 32:03Encrypting Data
- 34:06Digital Signatures
- 35:55Account Hijacking
- 43:59Replay/Denial of Service
- 52:58Remote Code Execution
related talks
29mAttack of the Clone Army
23mThe Role of IoT and 5G Devices in DDoS Attacks
32mCommon Attacks on IoT Devices
39mFortifying DevOps: Understand and Fight Botnets Threats
45mAnatomy of a DDoS
37mAnatomy of a DDoS
03mThe world will see (and just saw) an Internet zombie apocalypse
47mThe Secret Life of Enterprise Botnets