IoT Product Security

Course details

As with the traditional internet, the Internet of Things (IoT) is increasingly targeted by malicious attacks. Whether you are a CISO or security director for an organization that produces IoT or IIoT products, a product engineer looking to understand IoT engineering principles, or you just have a desire to learn how IoT devices should be secured, you should explore this advanced IoT product security course to learn how to build a risk-based IoT product security program in this quickly-evolving field.

Concepts

0. Introduction

01 - Course and instructor introduction
02 - IoT then and now
03 - IoT product lifecycle - Part 1
04 - IoT product lifecycle - Part 2
05 - OWASP Top 10 - Part 1
06 - OWASP Top 10 - Part 2

1. Product Security Programs

07 - Foundations for success
08 - IoT product security program - Part 1
09 - IoT product security program - Part 2
10 - CPSO reporting structure - Part 1
11 - CPSO reporting structure - Part 2
12 - CPSO reporting structure - Part 3
13 - Supplier risk
14 - Contracts
15 - Case study - CCleaner

2. Security by Design

16 - First steps - Framework
17 - Architecture stages - Part 1
18 - Architecture stages - Part 2
19 - IoT ecosystems
20 - IoT communications - Part 1
21 - IoT communications - Part 2

3. Hardware Root of Trust

22 - Foundations of trust - Part 1
23 - Foundations of trust - Part 2
24 - Foundations of trust - Part 3
25 - Foundations of trust - Part 4
26 - Encryption
27 - Trusted execution environment
28 - Trusted Platform Module - Part 1
29 - Trusted Platform Module - Part 2
30 - Trusted Platform Module - Part 3
31 - Trusted Platform Module - Part 4
32 - Hardware security
33 - DICE - Part 1
34 - DICE - Part 2
35 - Module 14 review

4. Secure Development

36 - Product design (hardware) - Part 1
37 - Product design (hardware) - Part 2
38 - Product design (hardware) - Part 3
39 - Product design (software)
40 - IoT operating systems
41 - IoT Bill of Materials - Part 1
42 - IoT Bill of Materials - Part 2

5. Build, Ship, Operate

43 - Manufacturing and provisioning
44 - Vulnerability management and patching - Part 1
45 - Vulnerability management and patching - Part 2
46 - Vulnerability Disclosure Program - Part 1
47 - Vulnerability Disclosure Program - Part 2
48 - Vulnerability Disclosure Program - Part 3
49 - Device ownership
50 - IOTSF Secure Design Best Practice Guides

6. Privacy

51 - Data privacy - Part 1
52 - Data privacy - Part 2
53 - Reasonable security - A review of US law affecting IoT
54 - Global IoT laws - A review of international law affecting IoT

IoT Product Security

Authors

Cybrary