A Basic Info

1. OWASP Top 10
IoT
(Internet of Things)
G4H/owasp/null meet

2. Who Am I..?
Veerababu
Maintainer at
@Veeru_rockstar

3. Agenda..!
.. IoT Introduction
.. IoT Owasp Top 10
.. Q&A
.. References

4. IoT Intro ..!
IoT is simply the network of interconnected things/devices which are
embedded with sensors, software, network connectivity and necessary
electronics that enables them to collect and exchange data making
them responsive.
IoT Component..!
1. Hardware
2.software
3. Communication Infrastructure

5. 1.IoT mobile application,
2.cloud APIs,
3.communication and protocols,
4.embedded hardware and firmware.
Main IoT Security Testing

6. Just Theory
No Practical

7. ...1 – Insecure Web Interface
...2 – Insufficient Authentication/Authorization
...3 – Insecure Network Services
...4 – Lack of Transport Encryption
...5 – Privacy Concerns
...6 – Insecure Cloud Interface
...7 – Insecure Mobile Interface
...8 – Insufficient Security Configurability
...9 – Insecure Software/Firmware
...10 – Poor Physical Security
OWASP Top 10 IoT:

8. I1.Insecure Web Interface:

9. What are they ..?
1. web login pages
2. cctv dvr login pages
still working on this..!
I1.Insecure Web Interface
..Weak credentials
..Weak passwords
..Capture plaintext credentials
..Internal and external vulnerability

10. There is no security ..!

11. I2. Insufficient Authentication/Authorization:

12. I2.Insufficient Authentication/Authorization
..Weak passwords
..Weak password recovery
..Poorly protected credentials
..Internal and external vulnerability

13. still using default password "admin" and "1234"
Web interface accepting denial of login attempts

14. I3.Insecure Network Services:

15. I3.Insecure Network Services:
.. Attack vulnerable network services
.. Attack device itself
.. Bounce attacks off of the device
.. Buffer overflow attacks for Denial of Service
.. Sniffers and fuzzers and Scanners

16. Internet Using Devices
Telnet -- 23
FTP -- 21
Finger -- 79
TFTP -- 69
SMB -- 445
Common Ports for Devices :

17. Port scanning with nmap:

18. VNC related exploits and payloads:

19. Port Number :
8000
Port Number : 1072

20. I4 .Lack of Transport Encryption:

21. I4 . Lack of Transport Encryption:
.. Easy view of unencrypted data passing between or over networks
.. Traditional crypto vulnerabilities
associated with SSL and TSL i.e. Man In the Middle attacks etc.
.. Compromised Transport Layer means everything above it is
vulnerable

22. An Example:

23. I5 Privacy Concerns :

24. I5 Privacy Concerns:
.. Insufficient authentication
.. Lack of transport encryption and storage of data in encrypted format
.. Insecure network services
.. Collection of unnecessary personal data

25. Common error..?

26. What are possible to attacks..?

27. I6.Insecure Cloud Interface:

28. I6 Insecure Cloud Interface:
.. Insufficient authentication
.. Lack of transport encryption and storage of data in encrypted format
.. Attack likely from the Internet
.. Easy to guess credentials
.. Using password reset mechanism to see if account exist
.. Identify is SSL is in use
.. Account enumeration

29. Cloud login page .. i didn't test anything..?

30. I7.Insecure Mobile Interface:

31. I7.Insecure Mobile Interface:
.. account lockout mechanism
.. Insufficient authentication
.. Lack of transport encryption and storage of data in encrypted format
.. Attack likely from the Internet
.. Easy to guess credentials
.. Using password reset mechanism to see if account exists
.. Identify is SSL is in use
.. Account enumeration

32. Common Pattern Locks

33. I8.Insufficient Security Configurability:

34. I8.Insufficient Security Configurability:
.. Lack of granular ability to configure authorizations.
.. Weak passwords and credentials.

35. I9.Insecure Software/Firmware:

36. I9.Insecure Software/Firmware:
.. Insecure firmware software encrypted updates
.. Malicious updating

38. Publisher Not trusted..?

39. Firmware Update .. Is It Safe..?

40. I10. Poor Physical Security:

41. I10. Poor Physical Security
USB, SD cards, other storage devices that give access to the Operating System

42. ＋＋ ?=
An Example..

43. References ..!!
1. https://www.owasp.org/index.php/Top_IoT_Vulnerabilities
2. http://www.securityfocus.com/bid/70574
3. http://internetofthingswiki.com/internet-of-things-definition/
4. http://iotpentest.com/
5. http://iotsecuritylab.com/