10 Years of IoT Village: Insights in the World of IoT
Reflects on a decade of IoT Village security research, vulnerability discoveries, and the evolution of connected device defense.
Summary
A Decade of IoT Security Research
Since its founding at DEF CON, IoT Village has served as a central hub for embedded device security research, zero-day disclosures, and community education across thousands of connected products.
Evolution of Vulnerability Classes
Reflecting on ten years of research highlights how IoT vulnerabilities have transitioned from basic hardcoded credentials and unauthenticated telnet daemons to complex firmware encryption bypasses, supply chain flaws, and memory corruption exploits.
Impact on Vendor Practices and Regulations
Persistent public disclosures and responsible disclosure initiatives have spurred meaningful improvements in manufacturer security baselines, firmware signing practices, and international IoT cybersecurity labeling standards.
The Future of Connected Device Security
Looking ahead, IoT Village organizers discuss emerging challenges in consumer IoT, medical devices, and smart infrastructure, emphasizing the ongoing necessity of independent security research.
Related talks
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·54 min
Andrew Bellini
Provides a beginner-friendly methodology and budget hardware toolkit guide for disassembling, extracting firmware, and hacking IoT devices.
Creator Stage·28 min
Justin Mott · Ava Petersen
Documents finding nine zero-day vulnerabilities in Vilo consumer home routers through UART interfacing, firmware reversing, and protocol analysis.