The IoT Requires Upgradable Security
summary
Billions of IoT nodes (he cites 8 billion by 2020) expand attack surface so devices must support firmware updates for their lifetime; examples include a Linux‑based smart rifle with a writable aiming stack, pacemaker RF interfaces that allow nearby modification, and a Philips lightbulb worm that spreads across proprietary meshes. Physical attack tools are now cheap—CheapWhisper ($250) and $350 EMI rigs—so defenses require secure boot with asymmetric keys, encrypted images, update authorization and reserved memory for future patches.
AI-written summary · about
chapters (26)
- 0:00Intro
- 0:56Why are we doing this
- 1:53How do you get two billion devices
- 2:38The value of the IoT
- 6:20Security of guns
- 7:47Security of pacemakers
- 8:43Classical cybersecurity
- 9:35IoT devices
- 11:23IoT security requirements
- 12:30IoT security is a balancing act
- 14:10Who is the adversary
- 16:19Commoditization
- 17:33Cryptography
- 18:12Cheap Whisper
- 18:46IoT Goes Nuclear
- 19:48EMI Injection
- 20:31EMI today
- 21:11Choice of security
- 21:35New normal attacks
- 23:23The adversary of 2035
- 24:00Secure boot
- 25:03Upgrade strategy
- 28:46Labels
- 29:52IoT Security Improvement Act
- 30:30GDPR
- 31:28Security is not binary
related talks
29mSecuring IoT/OT Against Modern Threats
38mThe 'S' in IoT stands for Security
21mIndustrial IoT security issues and countermeasures
47mTrend Micro's VP of security research reveals the latest IoT threats and how to combat them
32mCommon Attacks on IoT Devices
28mIoT Security - it's not just the devices
15mDevice Security Matters More Than Ever
27mThe IoT storm... Will we survive the coming deluge?