Hardware Podcasts

What Are the Security Implications of IoT? | Andrew Howard, CTO at Kudelski Security | #AskIoT E020

IoT For All Podcast · 28 Mar 2019 · 50m

What this episode covers

Andrew Howard, CTO of Kudelski Security, explains that IoT security requires protecting device integrity, data confidentiality, and access management, emphasizing that physical attacks on devices like OBD2 dongles can compromise vehicle safety. He highlights that manufacturers often neglect physical security, assuming network-only threats, while enterprises face risks from legacy systems that were never designed for connectivity. Howard advises non-technical companies to hire consultants and use vetted open-source solutions rather than building custom security infrastructure from scratch. The discussion covers the spectrum of risks from individual privacy breaches to physical harm in industrial and medical settings, noting that industrial control systems like SCADA are particularly vulnerable.

Most relevant to

large enterprises

Topics

Mentioned

Companies
Kudelski Security, Skadata
Also
OBD2, Stuxnet, Triton, DHS, NIST, ISO

Related episodes from other shows

Other shows on the same ground, closest first.

  • Over the Air · 23m

    IoT Security & The Importance Certificates with Ellen Boehm, SVP, IoT at Keyfactor

    Ellen Boehm, SVP of IoT at Keyfactor, discusses the critical role of digital certificates and public key infrastructure (PKI) in securing IoT devices, particularly in high-stakes industries like medical and automotive. She explains how Keyfactor helps OEMs manage certificate lifecycles at scale to prevent field failures and prepare for post-quantum cryptography threats. The conversation also covers the challenges of integrating enterprise security solutions with open-source foundations and the emerging need for OT security in industrial automation.

    Security & privacyConnected products & IoT
    7 chapters

  • Embedded.fm · 1h 08m

    311: Attack Other People's Refrigerators

    Rick Altherr, a security researcher at Eclypsium and former engineer at Apple and Google, discusses firmware security, threat modeling, and the challenges of securing IoT devices like refrigerators. He explains how adding connectivity expands attack surfaces and details the STRIDE framework and OWASP guidelines for evaluating risks. Altherr also shares insights on his career path, the importance of mentorship, and his technical hobbies including reverse engineering FPGA bitstreams and car ECUs.

    Security & privacyEmbedded firmware
    8 chapters

  • Manufacturing Happy Hour · 38m

    Cybersecurity Mini-Series: Why Security Matters (Ep. 1 of 4)

    Steve Ludwig, Program Manager for Safety & Security at Rockwell Automation, explains why cybersecurity is a critical component of digital transformation for industrial manufacturers, emphasizing that security protects assets, workers, and the environment, not just data. He details the convergence of IT and OT, noting that while IT allows for easy patching, OT requires scheduled downtime and careful planning to avoid disrupting physical processes. Ludwig highlights that most breaches are opportunistic rather than targeted, with over 40% of attacks originating from insiders, and stresses the importance of integrating safety and security standards to mitigate risks like equipment damage or environmental harm.

    Security & privacyIndustrial & consumer product design
    8 chapters

  • Embedded.fm · 1h 05m

    149: Flamethrowers Aside

    Craig Smith, author of the Car Hackers Handbook and founder of OpenGarages, discusses the technical and cultural aspects of automotive security and modification. He explains how CAN bus networks function, why they lack inherent security, and how attackers can exploit vulnerabilities in infotainment systems to gain code execution. Smith advocates for open access to vehicle data, the use of junkyard parts for safe testing, and the importance of organizations like I Am The Cavalry in bridging the gap between security researchers and traditional automakers.

    Security & privacyEmbedded firmware
    10 chapters

  • EE Times Current · 40m

    A Radical Change in the Business Model | Colin Has Had It With Your Promises | “The Great Influenza” of 1918

    Daniel Cooley, Chief Strategy Officer of Silicon Labs, explains that the electronics industry is undergoing a radical change as companies expand beyond their traditional domains, leading to a fusion of the technology stack from hardware to cloud. He highlights the growing importance of security in IoT devices, driven by legislation and the need to protect transactions on consumer-grade hardware. Colin Barnden, an automotive analyst, criticizes the automotive industry's overreliance on simulations for autonomous vehicles, arguing that the technology is not yet ready for mass deployment and that focus should remain on proven driver assistance systems. Author David Benjamin discusses the 1918 influenza pandemic, emphasizing the historical lessons of testing, tracing, and isolating, and the dangers of political obfuscation during health crises.

    Security & privacyAI & machine learning
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.