Hardware Podcasts

IoT Security Trends and What to Expect in 2021 | Trend Micro's Greg Young

IoT For All Podcast · 15 Feb 2021 · 27m

What this episode covers

Greg Young, Vice President of Cybersecurity at Trend Micro, discusses the evolving security landscape for IoT, highlighting the shift from trusting components to trusting how they are used. He identifies wireless components, bespoke protocols, and unpatched legacy systems as primary vulnerabilities, noting that healthcare and connected cars are currently high-value targets for attackers. Young explains that the drive for low-cost components often results in a lack of internal development teams and security patches, forcing OEMs to rely on network-level shielding and bug bounty programs to mitigate risks.

Most relevant to

large enterprises

Topics

Mentioned

Companies
Trend Micro, Gartner, Tesla
Also
PIPS 140

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 13m

    192: Button Connected To Nothing

    Terry Dunlap, founder and CEO of Tactical Network Solutions, discusses the critical lack of security in Internet of Things (IoT) devices, citing the Mirai botnet, the TrendNet FTC lawsuit, and the St. Jude Medical defibrillator alert as key examples of failure. He explains that common vulnerabilities stem from insecure coding practices, such as buffer overflows and hardcoded keys, often exacerbated by outsourcing firmware development without source code visibility. Dunlap highlights the emergence of standards like UL 2900 and the work of organizations like CableLabs to enforce firmware evaluation, while noting that consumers often remain vulnerable due to poor router configurations and a lack of firmware update support. He advises manufacturers to implement secure coding practices, use source code auditing tools, and encrypt firmware images to reduce the attack surface before devices reach the field.

    Security & privacyEmbedded firmware
    11 chapters

  • Embedded.fm · 1h 10m

    515: Script Boomers

    Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

    Security & privacyConnected products & IoT
    8 chapters

  • The Spark Gap · 46m

    The Spark Gap - Episode 8

    Jacob Rosenthal, an engineering consultant working with companies like Octoblue, explains the current state of the Internet of Things, noting it is often a rebranding of existing connectivity technologies. He discusses the trade-offs between Wi-Fi and Bluetooth Low Energy, highlighting issues with power consumption, security, and proprietary firmware stacks on platforms like Spark, Electric Imp, and Pinocchio. The conversation covers the shift of intelligence from embedded firmware to cloud-based JavaScript, raising concerns about privacy, data ownership, and the replacement of embedded engineers by web developers.

    Connected products & IoTWireless & RF
    7 chapters

  • Embedded.fm · 1h 08m

    311: Attack Other People's Refrigerators

    Rick Altherr, a security researcher at Eclypsium and former engineer at Apple and Google, discusses firmware security, threat modeling, and the challenges of securing IoT devices like refrigerators. He explains how adding connectivity expands attack surfaces and details the STRIDE framework and OWASP guidelines for evaluating risks. Altherr also shares insights on his career path, the importance of mentorship, and his technical hobbies including reverse engineering FPGA bitstreams and car ECUs.

    Security & privacyEmbedded firmware
    8 chapters

  • Embedded.fm · 58m

    415: Rolling Computers

    Benny Meisels, Lead Solution Architect at Cymotive, discusses the evolving security landscape of modern vehicles, which he describes as 'rolling computers.' He explains how the shift from isolated ECUs to connected systems with over-the-air updates creates new attack surfaces, particularly regarding keyless entry vulnerabilities like relay attacks and UWB distance reduction. Meisels emphasizes the need for end-to-end threat modeling across the complex supply chain of Tier 1, 2, and 3 suppliers, and highlights tools like ASRG, ICSim, and Car in a Box for learning automotive security.

    Security & privacyEmbedded firmware
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.