Ecosystem, Interoperability and Standards: IoT Security
summary
Claims an IoT-tailored Security & Privacy Development Lifecycle (SPDL) and a privacy score called CPVSS; demonstrates concrete failures: a tiny script plus a malicious app subscribes to a BLE channel and reads encrypted wearable heart‑rate and step data, and a crafted cross‑site scripting payload in friend requests steals admin credentials enabling remote device wipes. Shows tools (ADB logs, custom parsers), a real exploit path, and cites a 400 million‑record breach to motivate scoring.
AI-written summary · about
chapters (23)
- 0:00Intro
- 1:52Agenda
- 5:40Process Challenges
- 7:35Technical Challenges
- 9:48Holistic Security & Privacy Process
- 10:09Security Topics
- 10:49Hardware & Firmware Security Paradigms
- 11:14SW Security Paradigms: application SW
- 11:56Communication Protocols
- 12:28Ecosystem security challenges
- 13:04Demo 1: Ecosystem overview
- 13:29Device communication
- 14:48The Problem - Prelude
- 16:22Example - Wearable Ecosystem 1
- 18:06Demo 2: Ecosystem overview
- 19:09Target : Sign-up and Profile pages
- 20:05Exploit Scenario: The attack
- 20:41Victim - logs in
- 20:54Attacker's c&c
- 21:30Access to admin portal
- 24:56Privacy & Data Access Laws
- 26:12Quantifying Privacy Vulnerabilities
- 29:19Summary
related talks
54mSecuring Your In-Ear-Fitness Coach: Challenges in Hardening Next Generation Wearables
48mSecuring The Internet Of Things
30mSupply Chain Security for IoT Devices
25mTrust in the edge, trouble in the cloud
59m(In)secure Things
39mDilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway
11mSecuring IoT Integrations with Third-Party Services
10mIoT: End of Shorter Days