Threat Modeling for IoT
summary
Covers concrete findings and mitigation choices: recalls 47 vulnerabilities in 23 devices from a Def Con study and a Jeep Cherokee chain that used ~12 weak Wi‑Fi passwords plus an MCU that accepted any firmware to take control. Builds a threat model assuming an attacker can inject arbitrary packets but not break modern crypto, recommends DTLS with PSK for sensor authentication, warns that if flash can be read attacker can spoof devices, and shows a practical replay attack that drains batteries and wears flash despite RSA‑signed firmware with monotonic version.
AI-written summary · about
chapters (9)
- 0:00Introduction to threat modeling
- 2:12What is threat modeling
- 5:23Policy and attacker capability
- 6:49Data flow in IoT systems
- 9:42Protecting secrets in IoT
- 13:15Spoofing and denial of service
- 14:43Software update threats
- 18:18Threat model document challenges
- 20:06Q&A on threat model execution
related talks
21mIndustrial IoT security issues and countermeasures
32mCommon Attacks on IoT Devices
01h 00mThreat Modeling for Secure Software Design
25mTrust in the edge, trouble in the cloud
41mPanel: Tackling Automotive Hardware Vulnerabilities
23mSmart Devices Gone Rogue: IOT Vulnerabilities and Designing For Security
47mTrend Micro's VP of security research reveals the latest IoT threats and how to combat them
29mSecuring IoT/OT Against Modern Threats