The Internet of Fails: Where IoT Has Gone Wrong
Mark Stanislav and Zach Lanier details this presentation will dive into research, outcomes, and recommendations regarding information security for the "Internet of Things".
Summary
Architecture and Background
This presentation will dive into research, outcomes, and recommendations regarding information security for the "Internet of Things". Mark Stanislav, Zach Lanier contextualize these mechanics within the broader malware landscape.
Vulnerability Analysis
The analysis investigates key threat vectors and design shortcomings related to return-oriented-programming, rop-gadgets, exploit-mitigation, memory-corruption.
Exploitation and Demonstrations
This presentation will dive into research, outcomes, and recommendations regarding information security for the "Internet of Things". Mark and Zach will discuss IoT security failures both from their own research as well as the work of people they admire. Attendees are invited to laugh/cringe at concerning examples of improper access control, a complete lack of transport security, hardcoded-everything, and ways to bypass paying for stuff.
Remediation and Defensive Strategies
Defenders and researchers are provided actionable defensive mitigations, monitoring telemetry, and configuration safeguards to minimize systemic risk.
Related talks
Main Stage·51 min
Richard Thieme
Richard Thieme explores the only way to tell the truth is in fiction at DEF CON 22, examining return-oriented-programming and practical defenses.
Main Stage·49 min
Eijah
Eijah details saving Cyberspace by Reinventing File Sharing Eijah Internet access is a basic human right, due to its unparalleled capacity to deliver content and information.
Main Stage·1 hr 39 min
Dan Kaminsky
Dan Kaminsky details secure Random By Default Dan Kaminsky Chief Scientist, White Ops As a general rule in security, we have learned that the best way to achieve security is to enable it by default.