Duration
2 days
OVERVIEW
The ability to connect, communicate with, and remotely manage an incalculable number of networked, automated devices (approximately 26 Billion by 2020) via the Internet is becoming pervasive, from the factory floor to the hospital operating room to the residential basement.
The transition from closed networks to enterprise IT networks to the public Internet is accelerating at an alarming pace—and justly raising alarms about security. As we become increasingly reliant on intelligent, interconnected devices in every aspect of our lives, how do we protect potentially billions of them from intrusions and interference that could compromise personal privacy or threaten public safety?
This workshop covers the basics of IoT landscape and takes you thru on the Security Challenges and vulnerabilities and teaches you the steps to hack and harden the IoT devices, applications and ecosystem.
AUDIENCE
IoT Enthusiasts, IoT Designers, IoT Developers, IoT Implementers, IT Managers, IT Auditors and anyone who is ready to master the steps required to secure IOT Implementations.
METHODOLOGY
This program will be conducted with interactive lectures, PowerPoint presentations, discussions and practical exercises.
MODULES
Module 1: IoT an Overview
- What is IoT ?
- IoT Architecture & Ecosystem
- 6 sides of IoT Puzzle
- Hardware & Software Platforms
- Communication Channels & Protocols
- Cloud & IoT
- Data Streaming & IoT
- Data Store & IoT
- What is Sensor & Actuator ?
- Sensor Types & Properties
- Cloud & RESTful Web Services
- IoT Myths
- IoT Applications
Module 2: IoT Security
- IoT Threats
- Challenges to Secure IoT Deployments
- IoT Attack Surface Areas
- CSA IoT Security Controls
- Privacy by Design
- Secure Systems Engineering
- Layered Security Protection
- Data Protection
- IoT Security Controls Lifecyle
- Authentication / Authorization
- Logging & Audit Framework
Module 3: OWASP Top 10 IoT Vulnerabilities
- Insecure Web Interface
- Insufficient Authentication/Authorization
- Insecure Network Services
- Lack of Transport Encryption
- Privacy concerns
- Insecure Cloud Interface
- Insecure Mobile Interface
- Insufficient Security Configurability
- Insecure Software/Firmware
- Poor Physical Security
Module 4: Hacking IoT Devices
- Hacking IoT Baby Monitors
- Hacking Smart Watches
- Hacking Wireless Lightbulbs
Module 5: IoT Endpoint Security
- Intro to GSM IoT Endpoint Security Guidelines
- IoT Endpoint Security Challenges
- IoT Endpoint Security Model
- IoT Endpoint Security Recommendations
- Critical Security Recommendations
- High Priority Security Recommendations
- Medium Priority Recommendations
- Low Priority Recommendations
Programme scope, delivery arrangements and suitability are confirmed during enquiry.