OWASP IoT Top 10
summary
Defines the OWASP IoT Top 10 with a clear methodology and concrete outputs: a dataset aggregated from NVD Bugcrowd and internal vulns, weighted and analyzed to show what is actually exploited in the wild, a ranked list that moves weak passwords and network services to the top, and new items like insecure/outdated components (supply chain) and device management. The project shows change history, rationale for each rank, and an open Slack channel iot-security for ongoing feedback.
AI-written summary · about
chapters (6)
- 0:00Project introduction
- 1:04Methodology and data
- 2:27Current top 10 risks
- 4:47Changes from 2014 list
- 6:17Audience feedback session
- 16:43Refining the security list
related talks
47mOWASP Top 10
30mTop 10 Introduction
26mFlagship Projects: Top 10 "The making of the OWASP Top 10 and beyond"
50mThe How and Why of the OWASP Top Ten 2021
29mFlagship Projects: Top 10 "Intro of Top 10"
49mThe 2013 OWASP Top 10
29mDiving into the CVSS Base Score Metrics - An Exploratory Analysis Bridging Product Security...
36mOWASP IoTGoat Project Overview and Roadmap
