Assessing the Embedded Devices On Your Network

Explore the unique challenges of assessing embedded devices and Internet of Things (IoT) security in this 34-minute conference talk from BSidesSF 2017. Delve into the specific constraints of threat modeling for these tightly integrated systems, which often lack traditional host-based security controls. Follow along as the speaker conducts a live assessment of a VoIP phone, demonstrating practical techniques such as hardware pin identification, UART analysis, fuzzing, and debugging. Learn about potential mitigations for devices that cannot be easily updated, and gain insights into the distinct confidentiality, integrity, and availability characteristics of embedded systems. Discover how to approach security assessments for the growing number of connected devices on your network.