Building a Comprehensive IoT Security Testing Methodology
summary
Covers how to construct a structured, holistic security testing program for IoT product ecosystems, addressing technical details and challenges across device and system layers. Specifies testing areas including mobile apps, cloud APIs and web services, network and radio-frequency communications, electronic components, and embedded firmware, and explains why a comprehensive methodology is necessary.
AI-written summary · about
chapters (18)
- 0:00RSAConference 2020
- 5:21Security Testing Methodology Structure
- 8:11Functional Evaluation Phase
- 9:23Reconnaissance Phase
- 11:03Testing Phase
- 12:53Management & Control Application Testing
- 15:19Network Testing
- 16:09Embedded Hardware Testing
- 19:21Firmware Analysis Testing
- 21:23Radio (RF) Testing
- 23:52Analysis Phase
- 26:37Enterprise IoT Sensor Technology
- 33:43Consumer Smart Door Lock APIs
- 36:53Basic Entry Level Testing Skills
- 38:09Basic Embedded Testing Lab
- 39:59Training and Exposure
- 42:24Enterprise Consumers of lot
- 45:33Questions
related talks
53mBuilding a Comprehensive IoT Security Testing Methodology
24mIoT Security Testing Guide (ISTG)
37mWhy is IoT security so hard and what can we do about it?
40mInternet of Things technologies: risks, challenges and testing
55mthe current problems with IoT security
54mSecurity in IoT: Challenges, Vulnerabilities and Countermeasures
40mInternet of Things technologies: risks, challenges and testing
31mSecuring the Internet of Things