IoTSF Conference 2024
2024-10-23
London, United Kingdom
[IoTSF Conference 2015, IoTSF Conference 2016, IoTSF Conference 2017, IoTSF Conference 2024]
who it's for
iot security engineers, product security managers, security architects, automotive security engineers, incident response teams, compliance and regulatory leads, iot product managers
topics
open-source secure element hardware; true random number generators (TRNGs); software bill of materials (SBOM); SBOMs for trusted AI builds; incident response playbooks and exercises; device identity and verifiable credentials; UNECE R155/R156 and EU RED compliance; vehicle SOCs and intrusion detection; firmware updates and root of trust; memory safety for embedded systems; supply-chain backdoors and code provenance; secure boot and certificate management
| title | author | length |
|---|---|---|
| The Highlights | 02m | |
Conference report claims a move from blackbox IP to a completely open security element that is being brought to market and backed by the IoTSF community… | ||
| IoT Security: Past, Present and Future | John Moore | 22m |
Timeline from 2015 launch to today with concrete outputs: adoption of IoT Security Assurance Framework moving from PDF to a lifecycle tool for developers… | ||
| IoT Security: Past, Present and Future | Apostol Vassilev | 20m |
Argues that generative AI brings measurable benefits but requires concrete defenses: models are attackable at every lifecycle stage, NIST publishes a secure… | ||
| Securing IoT for Life: Navigating the Challenge of Constant Change | Alex Mouzakitis | 22m |
Overview of automotive IoT security that states hard numbers and actionable tech: vehicles now have 100+ ECUs and regulators require UNECE R155/R156… | ||
| Surviving the Attack: Planning and Practicing IoT Security Response | Jennifer Williams | 18m |
Covers actionable incident response steps: establish an inner circle for staged communications, follow a checklist to identify the compromise source, call… | ||
| Your Smart Home, Their Weapon: The Hidden World of Tech Abuse | Leonie Tanczer | 20m |
Connected devices are actively used in intimate partner abuse: GPS trackers, spy apps, Tiles and plain phones enable stalking; smart fridges and vacuums become… | ||
| The Human Factor: Why Narrative Matters for Public IoT Security | Rebecca Hartley | 12m |
Claims that how IoT is talked about changes security outcomes: field methods are walks, event observation and interviews, showing many public devices are… | ||
| Cybersecurity's Silent Crisis: Protecting the Human Element | 19m | |
A report-backed initiative that treats cyber teams as mission-critical infrastructure, not generic wellness cases, with four working groups: framework… | ||
| Secure by Design | John Sirianni | 25m |
Claims an available January 2025 world's first open-source secure element built as open hardware and software with community verification, integrating… | ||
| Establishing a Language of Trust | Nick Allott | 20m |
Argues that trust is practical: use device identities and certificates plus verifiable credentials to tie manufacturer, model and firmware to a network… | ||
| Why TRULY Random Keys Are CRITICAL (and How Quantum Dice Fixes It) | Ramy Shelbaya | 15m |
Claims a patented Source Device Independent Self-Certification (DISK) protocol that produces unpredictable keys provably unguessable even if the hardware is… | ||
| Automotive Cyber Security: Driving Business Transformation | 26m | |
Automotive systems are framed as the most complex commercial systems, so modularity and decomposition become the primary defence and business enabler. Claims… | ||
| From Wild West to Secure Business: Understanding Data and Standards in OT | Paul Hingley | 21m |
Claim that security need not add extra cost and must be engineered in from the start, with concrete rules: NISv2 and the EU Cyber Resilience Act widen scope… | ||
| Beyond the Device: Why IoT Data Security is the Real Challenge | David Ihrie | 14m |
A state innovation office builds and pilots a data-first IoT stack for two real use cases: wildfire detection and advanced air mobility. Deployed environmental… | ||
| Securing IoT: Why Tech Isn't Enough (An NCSC Perspective) | IoT Security Foundation | 15m |
Government cyber advisers argue the core problem is not unknown bugs but simple fixes that fail at scale because of legacy fleets and opaque supply chains they… | ||
| Beyond the Default Password: Building Trustworthy IoT Products | Andrew Bott | 18m |
Claims a practical, end-to-end build: a product stack that implements a device root of trust (true RNG, unique device identity, secure storage and secure boot… | ||
| Embedded Security's Weakest Link: Lessons From Simple Mistakes | Des Howlett | 17m |
Finds real mistakes: a common engineering password burned into flash and shared across products that can't be changed; leaving test modes and debug pads that… | ||
| From Risk to Return: Measuring Cybersecurity ROI with Data Analytics | Kay NG | 15m |
Three-step analytics method claims to turn cybersecurity spending into measurable ROI by: defining AS‑IS and TO‑BE maturity, mapping scope/visibility with a… | ||
| IoT Security as Revenue: Beyond Compliance Checklists | Peter Davies | 11m |
Argues that security as revenue is a business requirement: investors and boards withhold capital unless products prove they generate value through risk… | ||
| Securing IoT's Trust Boundaries: Navigating Complexity with NCSC Patterns | Phil Day | 21m |
Claims a reproducible engineering approach: applies NCSC cross-domain patterns to IoT, implements an import pipeline that terminates LoRaWAN and inspects… | ||
| Your xIoT Devices Are Under Attack: Why everything connected is now a target | Toby Wilmington | 23m |
Claims that industrial and consumer devices are becoming primary attack vectors: Triton malware is shown targeting Schneider Triconex controllers with… | ||
| Addressing the Real Challenges of Global IoT Compliance | Matt Tett | 13m |
A global conformity scheme called the Cyber Trust Mark finishes a 15‑year build and goes live after trademark clearance in May 2024, offering live, revocable… | ||
| Safe Shark Uncovered: Fraudulent Certs, Shared Code, and Real IoT Compliance | Jonathan Marshall | 10m |
SafeShark recounts a seven‑year program that builds an automated conformance tester claimed to ensure 100% compliance with PSTI, RED and CRA, used by LG… | ||
| Navigating the Complex World of IoT Security Regulations | Florian Lukavsky | 07m |
OneKey’s platform automates device assessments, builds an SBOM, flags public and undisclosed vulnerabilities and outputs firmware compliance status and… | ||
| Navigating the EU RED IoT Security Maze: Standards, Compliance, and Hurdles | IoT Security Foundation | 11m |
Standards published August 2024 lay out 14 requirements with a six‑level hierarchy, mixing normative and informative text, and add three assessment types —… | ||
| Beyond Fragmentation: How Collaboration Unlocks IoT Security Value | Darron Antill | 21m |
Claims that ecosystem integration is the practical route to IoT security: the KeyScaler platform is presented as an identity lifecycle hub that must integrate… | ||
| IoT Security Regulation Overload? Your Guide to PSTI, NIS2, & CRA Compliance | Richard Marshall | 12m |
UK PSTI engagement runs over the next 12 months and offers an opportunity to change scope and wording rather than a new compliance deadline; standards and… | ||
| IoT Security's Toughest Challenges: Root of Trust, TEEs, & Firmware Updates | Bruno Crispo | 18m |
Crosson claims a practical stack: a secure cross compiler for C that produces safer firmware, an AI binary scanner to find vulnerabilities without source, a… | ||
| Stopping V2X Threats at the Source: Hardware Cybersecurity for Automotive | Rasadhi Attale | 12m |
Claims a hardware functional monitoring IPS implemented as 20 configurable IP blocks that passively capture AXI bus traffic, feed an analytics engine, and use… | ||
| Embracing Collaborative Approaches & Comprehensive Framework | Ian Pearson | 22m |
Claims that cyber regulation forces a phase shift in product development with longer support windows (5–10 year update cycles) and continuous liability, and… | ||
| IoT Security Exposed: From PLC Flaws to the Imperative of SBOM | Zahra Khani | 19m |
Detailed case studies show an SD card design flaw that lets an attacker overwrite PLC configs and passwords, a protocol fuzzing issue that stops the main PLC… | ||
| Memory Safety: The Pernicious Challenge | Nuala Kilmartin, Mike Eftimikas, Ashley Setter | 31m |
Panel claims CHERI can block over 70% of memory vulnerabilities and demonstrates concrete progress: a full port of OpenWrt to pure‑cap CHERI takes a few months… | ||
| The Business of IoT Security: Mastering the Economics Panel Session | IoT Security Foundation | 32m |
Argues that value shifts from hardware to data and SaaS/PaaS models while startups must capture ARR quickly; shows a Mexico City deployment where gunshot… | ||
| IoT Security: Past, Present and Future | Stephen Pattison, Haydn Povey, Richard Marshall, Anna Maria Mandalari, Peter Davies | 33m |
The IoTSF Assurance Framework traces practical roots in telco and media DRM and is already used to prepare products for the EU Cyber Resilience Act by mapping… | ||
| nothing matches | ||