Security Archives -

The S in IoT Stands for Security

Jane A — Tue, 06 Jun 2017 08:00:13 +0000

By Chris Romeo
Read this article by Chris Romeo about the need for security within IoT. This article covers three reasons why IoT is lacking fundamental security

The post The S in IoT Stands for Security appeared first on .

Top 3 Security Issues in Infrastructure IoT

Jane A — Tue, 27 Dec 2016 08:00:45 +0000

When we’re talking about infrastructure IoT, such as airports, mass transit, pipelines and electric grids, the biggest IoT cybersecurity issue is passiveness – not being proactive enough with your infrastructure’s ongoing cybersecurity needs.

Watch this video (or read this transcript) to see Stuart Phillips discuss each of the top 3 cybersecurity issues in infrastructure IoT

The post Top 3 Security Issues in Infrastructure IoT appeared first on .

IoT Security – the Security Development Lifecycle Way

Jane A — Fri, 26 Aug 2016 16:00:28 +0000

Episode 63

We all know, whether from experience or just intuitively, that bolting security on an IoT product after much of the development has been completed is a total rookie mistake, and a recipe for disaster. Yet this still happens. By crowdfunded startups who don’t mention security in their videos, to internal teams in larger enterprises who also emphasise the bling in order to get their project greenlit from within.

Listen to this podcast (or read the transcript) where I speak with Chris Romeo about the Security Development Lifecycle, the polar opposite to the bolt-on, that’s been successfully used in IT security for years

The post IoT Security – the Security Development Lifecycle Way appeared first on .

External IoT Security Assessment? Yep, but do so Wisely

Jane A — Wed, 17 Aug 2016 19:00:41 +0000

By Bruce Sinclair
Read this article by Bruce Sinclair to learn why getting an external security assessment for your Internet of Things product is a no brainer

The post External IoT Security Assessment? Yep, but do so Wisely appeared first on .

IoT Security Assessment – Black Hat, White Hat or Gray?

Jane A — Fri, 17 Jun 2016 15:00:35 +0000

Episode 56

Black hat, white hat… gray hat? What does it all mean? In this context, the different colored hats refer to the different approaches to testing the cyber security of your IT, or in our case, IoT infrastructure.

Listen to this podcast (or read the transcript) where I speak with Paul Jauregui about pen testing and other things you need to know about when working with an external security assessment firm

The post IoT Security Assessment – Black Hat, White Hat or Gray? appeared first on .

An Ethical Hacker’s Top 5 Security Issues in IoT

Jane A — Thu, 03 Dec 2015 13:00:05 +0000

Basic IT security principles may be old school but they are still relevant in the new realm of IoT security. Case in point, Paul’s top 3 of top 5 IoT security issues:
Lack of security by design
Web security
Basic cryptography principles
Management support
Customer demand

Watch this video (or read the transcript) to see Paul Dant give an ethical hacker’s perspective on the top five issues in Internet of things security and what is easy and not so easy to improve

The post An Ethical Hacker’s Top 5 Security Issues in IoT appeared first on .

Risk Assessment for the Internet of Things

Jane A — Thu, 15 Oct 2015 10:00:18 +0000

Episode 32

We speak about our offensive game so much that we forget that we need good defense in business too, that is, effectively protecting the value we create. However, and I speak from experience, the shiny new things seem so much more important than the seemingly dull security and privacy. Well, when looked at from a risk perspective, security and privacy all of a sudden becomes the purview of the manager.

Listen to this podcast (or read the transcript) with Paul Dant about IoT risk assessment as well as security by design, threat modeling and other important topics to the manager

The post Risk Assessment for the Internet of Things appeared first on .