# What Are the Security Implications of IoT? | Andrew Howard, CTO at Kudelski Security | #AskIoT E020

- Show: [IoT For All Podcast](https://hardwarepodcasts.com/podcast/iot-for-all-podcast)
- Published: 2019-03-28
- Length: 50m
- Page: https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security
- Listen: https://podcasters.spotify.com/pod/show/iot-for-all/episodes/What-Are-the-Security-Implications-of-IoT---Andrew-Howard--CTO-at-Kudelski-Security--AskIoT-E020-e28bp6q

## Summary

Andrew Howard, CTO of Kudelski Security, explains that IoT security requires protecting device integrity, data confidentiality, and access management, emphasizing that physical attacks on devices like OBD2 dongles can compromise vehicle safety. He highlights that manufacturers often neglect physical security, assuming network-only threats, while enterprises face risks from legacy systems that were never designed for connectivity. Howard advises non-technical companies to hire consultants and use vetted open-source solutions rather than building custom security infrastructure from scratch. The discussion covers the spectrum of risks from individual privacy breaches to physical harm in industrial and medical settings, noting that industrial control systems like SCADA are particularly vulnerable.

## Chapters

- [0:00](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security#t=0) Introduction: Andrew Howard and Kudelski Security
- [6:05](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security#t=365) Defining IoT Security: Confidentiality, Integrity, and Availability
- [8:47](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security#t=527) IoT Breaches: Cameras, Botnets, and Physical Harm
- [15:36](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security#t=936) Risk Spectrum: From Physical Harm to Data Privacy
- [17:24](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security#t=1044) Kudelski's 4 Pillars: Device, Data, Access, and Active Security
- [22:53](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security#t=1373) Securing Legacy Systems vs. Greenfield Designs
- [34:20](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security#t=2060) Case Study: OBD2 Dongles and Vehicle Fleet Management
- [40:02](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security#t=2402) #AskIoT: High-Risk Industries and Consumer Advice

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Mechanical engineering](https://hardwarepodcasts.com/topic/mechanical-engineering)
- [Manufacturing partners & offshoring](https://hardwarepodcasts.com/topic/manufacturing-partners)
- [Policy, trade & tariffs](https://hardwarepodcasts.com/topic/policy-trade-and-tariffs)

## Most relevant to

large enterprises

## Mentioned

- Kudelski Security (company)
- Skadata (company)
- OBD2 (other)
- Stuxnet (other)
- Triton (other)
- DHS (other)
- NIST (other)
- ISO (other)

## Related episodes from other shows

- [IoT Security & The Importance Certificates with Ellen Boehm, SVP, IoT at Keyfactor](https://hardwarepodcasts.com/podcast/over-the-air/2023-08-03-iot-security-the-importance-certificates-with-ellen-boehm-svp-iot-at-keyfactor) (Over the Air)
- [311: Attack Other People's Refrigerators](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators) (Embedded.fm)
- [Cybersecurity Mini-Series: Why Security Matters (Ep. 1 of 4)](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-17-cybersecurity-mini-series-why-security-matters-ep-1-of-4) (Manufacturing Happy Hour)
- [149: Flamethrowers Aside](https://hardwarepodcasts.com/podcast/embedded-fm/2016-04-27-149-flamethrowers-aside) (Embedded.fm)
- [A Radical Change in the Business Model | Colin Has Had It With Your Promises | “The Great Influenza” of 1918](https://hardwarepodcasts.com/podcast/ee-times-current/2020-05-29-a-radical-change-in-the-business-model-colin-has-had-it-with-your-promises-the-g) (EE Times Current)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to IoT For All Podcast.