This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

OWASP Internet of Things Top Ten Project

From OWASP
Revision as of 15:57, 26 March 2015 by Craig Smith (talk | contribs)

Jump to: navigation, search
OWASP Project Header.jpg

OWASP Internet of Things Top 10

Oxford defines the Internet of Things as: “A proposed development of the Internet in which everyday objects have network connectivity, allowing them to send and receive data.”

The OWASP Internet of Things (IoT) Top 10 is a project designed to help manufacturers, developers, and consumers better understand the security issues associated with the Internet of Things, and to enable users in any context to make better security decisions when building, deploying, or assessing IoT technologies.

The project defines the top ten security surface areas presented by IoT systems, and provides information on threat agents, attack vectors, vulnerabilities, and impacts associated with each. In addition, the project aims to provide practical security recommendations for builders, breakers, and users of IoT systems.

Licensing

The OWASP Internet of Things Top 10 is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.


What is the OWASP Internet of Things Top 10?

The OWASP Internet of Things Top 10 provides:

  • A list of the 10 Most Significant IoT Security Surface Areas
  • A list of basic recommendations for manufacturers, developers, and consumers

For each attack surface areas, the following sections are included:

  • A description of the attack surface
  • Threat agents
  • Attack vectors
  • Security weaknesses
  • Technical impacts
  • Business impacts
  • Example vulnerabilities
  • Example attacks
  • Guidance on how to avoid the issue
  • References to OWASP and other related resources

For each role in Manufacturers, Developers, and Consumer, the following recommendations are included:

  • For each IN category, list the top few considerations that should be observed in that context

Project Leaders

  • Daniel Miessler
  • Craig Smith
  • Jason Haddix

Related Projects

Quick Download

OWASP Internet of Things Top Ten 2014 PDF

Email List

[Subcribe here]

News and Events

  • IoT day is April 9th!
  • [February 2015] Added a PDF containing a walk through of the project and the Top Ten.

Classifications

Owasp-incubator-trans-85.png Owasp-builders-small.png
Owasp-defenders-small.png
Cc-button-y-sa-small.png
Project Type Files DOC.jpg