Securing the IoT World: Embedded Device Hardening & OWASP IoT Top 10
Belkin penetration tester Aaron Guzman breaks down the OWASP IoT Top 10, demonstrating firmware extraction, API reverse engineering, and defensive hardening.
Summary
The Proliferation and Vulnerability of Smart Home Devices
Consumer smart home gadgets and industrial sensors routinely ship with critical vulnerabilities that grant attackers persistent footholds on corporate and home networks.
Dissecting the OWASP IoT Top 10 Attack Vectors
Aaron Guzman analyzes common weaknesses—including insecure web interfaces, insufficient authentication, insecure network services, and lack of transport encryption.
Practical Firmware Extraction and Vulnerability Analysis
Guzman demonstrates desoldering SPI flash memory chips, extracting embedded root filesystems with binwalk, and identifying hardcoded private keys.
Hardening Guidelines for IoT Manufacturers
The presentation provides embedded developers with hardware hardening recommendations—including disabling debug ports, enforcing encrypted bootloaders, and signed OTA updates.
Related talks
IoT Village·39 min
Alexi Kojenov
Alexi Kojenov demonstrates applying core web application security skills to audit embedded Linux IoT devices, finding critical firmware and web UI flaws.
Village Presentations·22 min
Craig Young
Tripwire VERT researcher Craig Young exposes zero-day vulnerabilities across consumer smart home automation hubs, door locks, and wireless power outlets.
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.