IoT Security Checklist - Revision history

Craig Smith at 16:15, 6 January 2016

2016-01-06T16:15:31Z

Alexander Antukh at 12:59, 1 March 2015

2015-03-01T12:59:49Z

Alexander Antukh: /* Client-device encryption */

2015-03-01T12:59:03Z

‎Client-device encryption

Alexander Antukh: /* Firmware integrity controls */

2015-03-01T12:58:21Z

‎Firmware integrity controls

Alexander Antukh: /* Client-device encryption */

2015-03-01T12:57:16Z

‎Client-device encryption

Alexander Antukh at 12:55, 1 March 2015

2015-03-01T12:55:56Z

Alexander Antukh: init

2015-03-01T12:54:41Z

init

Alexander Antukh: init

2015-03-01T12:18:55Z

init

New page

{| class="wikitable"
|-
! Criteria
! Threat model
! Conditions
|-
| Unencrypted wireless channel
| Neighbor
| *hello | *hello2
|-
| row 2, cell 1
| row 2, cell 2
| row 2, cell 3
|}

@@ Line 2: / Line 2: @@
 Originally presented by @wallarm at OWASP Russia Meetup #2.
-== Threat model : neighbour ==
+* Contents have been merged into the IoT Attack Surface Areas project with the permission of this article's original creator.
-== Threat model : guest ==
+* [https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project#IoT_Attack_Surface_Areas_Project IoT Attack Surface Area Project]

@@ Line 1: / Line 1: @@
 = The Checklist =
 Originally presented by @wallarm at OWASP Russia Meetup #2.
 == Threat model : neighbour ==
@@ Line 46: / Line 45: @@
 * Present
 * Not present
 == Threat model : website ==
@@ Line 57: / Line 55: @@
 * Not present
 * Threat model applies for guest too!
 == Threat model : physical ==

@@ Line 15: / Line 15: @@
 === Client-device encryption ===
-* Present/not present
+* Not present
-* Weak/strong
+* Weak
-* Symmetric/asymmetric
+* Strong
-* Encryption key length
+* Type:
 === Authentication for firmware update ===

@@ Line 27: / Line 27: @@
 === Firmware integrity controls ===
 * Not present
-* Weak/strong
+* Weak
-* E-signature
+* Strong
-* Checksum
+* Type:
-* Self-written
+** E-signature
 * Threat model applies for reseller too!
 == Threat model : vendor ==

@@ Line 15: / Line 15: @@
 === Client-device encryption ===
-* Not present
+* Present/not present
 * Weak/strong
 * Symmetric/asymmetric

← Older revision		Revision as of 12:55, 1 March 2015
Line 1:		Line 1:
	= The Checklist =		= The Checklist =
		+	Originally presented by @wallarm at OWASP Russia Meetup #2.
		+

	== Threat model : neighbour ==		== Threat model : neighbour ==

@@ Line 1: / Line 1: @@
-{| class="wikitable"
+= The Checklist =
-|-
-! Criteria
+== Threat model : neighbour ==
-! Threat model
+=== Unprotected wireless channel ===
-! Conditions
+* Present
-|-
+* Not present
-| Unencrypted wireless channel
-| Neighbor
+== Threat model : guest ==
-| *hello | *hello2
+=== Authentication between client and device ===
-|-
+* Not present
-| row 2, cell 1
+* Login/password
-| row 2, cell 2
+* Key
-| row 2, cell 3
-|}
+=== Client-device encryption ===