Testing IoT Security shouldn't fear you if you have got a hacker mindset - By Santhosh Tuppad - For RTC 2018
1 like315 views
The document discusses the importance of having a hacker mindset to test IoT security, highlighting the risks posed by the growing number of smart devices. It emphasizes the necessity of understanding both web and IoT hacking, alongside practical security measures to mitigate threats. The author calls for awareness regarding the lack of white-hat hackers and the implications for future generations.
Testing IoT Security shouldn't fear you if you have got a hacker mindset - By Santhosh Tuppad - For RTC 2018
- 1. Mindset Over Skill Set: Got Hacker Mindset? Testing IoT Security Shouldn’t Fear You Santhosh Tuppad
- 2. sh-3.2# whoami I have been a great liar, a thief, physical infrastructure breaker, web application hacker, mobile apps hacker, kiosk machine basher, black-hat hacker, white-hat hacker, trainer, security coach and blah blah blah!
- 3. Why I don’t fear testing anything for “SECURITY”?
- 4. #CORRELATION Before being a hacker, I experimented and correlated my experimentation journey to hacking.
- 5. #InternetOf(every)thing - Connecting the devices like toaster, toothbrush, refrigerator, lights etc. with each other in order to establish communication & perform dangerously insane things.
- 6. Things are going to get WORSE. Future is not so cool considering the risks about 80 billion smart devices by 2025.
- 7. #WouldYouBeOkay Would you be okay if your car speed is controlled by malicious hacker? Would you be okay to send heart rate data of your baby incorrectly to physician? (Man In the Middle) Would you be okay if someone takes control of your CCTVs or Cameras installed in your home? Would you be okay if...
- 9. #ToThinkLikeACriminalIsNotACrime Practice thinking like a criminal… Practice more… Practice MORE...
- 10. #MyOpinionForMyself #WebOpensTheDoors #CloseTheDoorsIfNotRequired Learn web hacking to understand IoT hacking better… And then correlate… And identify specific attacks for IoT hardware/software ONLY… And Rock!
- 11. #MindsetRules #SecurityIsAFeeling • Disable unnecessary ports on hardware interface. • Web UI interface to IoT infrastructure is your start. • Mobile interface? Well, I love *.apk files. • Insecure hardware/firmware. • Poorly configured settings. #Question • Stronger encryption. But, make sure “key” is kept safe. • Let the clouds not thunder and rain. • Test ports are not meant to be in production • Logging and Alerts. • Privacy concerns? #GDPR • Physical Security - People seldom remember this.
- 12. #ChoiceIsOurs There are more black-hat hackers than white-hat hackers. We have massive skill shortage. We care about our generation & upcoming generations. Choice is yours… I hope malicious hackers don’t make a choice for you with IoT hacking.
- 13. Disclaimer: If I get more great votes, it doesn’t mean I hacked the feedback system and voted for myself. I am a good person. If you liked my talk, please vote for me at, #V193 slido.com