IoT Village·29 min
Waylon Grange
Waylon Grange analyzes the security posture of smart solar power inverters, demonstrating hardware probing, firmware extraction, and remote takeover vectors.
DEF CON 29/IoT Village across years
Paris and Bally's Hotels, Las Vegas · 5-8 August 2021 · 18 talks
IoT Village highlights embedded firmware analysis, smart home and industrial IoT security, reverse supply chain hardware trojans, silicon RNG entropy, and connected device policy.
1–18 of 18 talks
IoT Village·29 min
Waylon Grange
Waylon Grange analyzes the security posture of smart solar power inverters, demonstrating hardware probing, firmware extraction, and remote takeover vectors.
IoT Village·43 min
Jay Balan
Jay Balan shares insights from five years of IoT vulnerability research, demonstrating authentication bypasses, root shells, and practical disclosure lessons.
IoT Village·41 min
Hutch
Hutch investigates the corporate and domestic attack surface of voice assistants like Amazon Alexa, demonstrating skill hijacking and acoustic command injection.
IoT Village·54 min
Ken Pyle
Ken Pyle presents the BLUEMONDAY research series, uncovering systemic insecure-by-design vulnerabilities in enterprise IoT, NAS, and cloud gateways.
IoT Village·52 min
Harshit Agrawal
Harshit Agrawal evaluates RF-based attacks and electronic warfare tactics targeting military and critical infrastructure Internet of Things networks.
IoT Village·46 min
Amit Elazari · Armen Tarkhanyan · Ria Cheruvu
Legal and technical cybersecurity leaders explore multi-dimensional frameworks for establishing verifiable trust and safety across the global IoT ecosystem.
IoT Village·30 min
Ria Cheruvu
Intel AI architect Ria Cheruvu explores the ethical and security challenges of intelligent edge IoT devices performing real-time sensing and physical actuation.
IoT Village·39 min
Alexi Kojenov
Alexi Kojenov demonstrates applying core web application security skills to audit embedded Linux IoT devices, finding critical firmware and web UI flaws.
IoT Village·37 min
Stephen Sessler · Matt Hendricks
Stephen Sessler and Matt Hendricks examine how law enforcement uses consumer IoT data (Fitbits, Amazon Echos, smart appliances) as courtroom evidence.
IoT Village·47 min
Tim Jensen
Tim Jensen (EapolSniper) delivers a hands-on crash course on IoT penetration testing, covering network discovery, firmware extraction, and binwalk analysis.
IoT Village·29 min
Victor Hanna
Victor Hanna reverse engineers smart LED light controller protocols during lockdown, demonstrating unauthorized local and wireless lighting takeover.
IoT Village·43 min
Cheryl Biswas
Cheryl Biswas explores the growing attack surface of unmanaged enterprise IoT devices, addressing shadow IT, patch lag, and asset visibility gaps.
IoT Village·33 min
Michael Ross · Nick Balazs
Michael Ross and Nick Balazs present techniques for emulating non-standard MIPS architectures in QEMU to accelerate dynamic IoT firmware analysis.
IoT Village·33 min
Chloe Messdaghi · Farah Eddy
Chloe Messdaghi and Farah Eddy address systemic barriers facing marginalized communities in cybersecurity, sharing actionable frameworks for genuine inclusion.
IoT Village·26 min
Erez Hadad · Asaf Kaufman
Claroty researchers introduce the reverse supply chain attack vector, showing how returned merchandise (RMA) can be trojanized to infiltrate manufacturers.
IoT Village·20 min
Juneau Jones
Juneau Jones applies game theory to IoT ecosystems, modeling dynamic trust relationships, honey-tokens, and strategic deception between smart devices.
IoT Village·30 min
Ted Harrington
Ted Harrington challenges industry misconceptions around penetration testing, contrasting commoditized vulnerability scans with true adversarial assessments.
IoT Village·40 min
Dan Petro · Allan Cecil
Dan Petro and Allan Cecil uncover systemic flaws in hardware Random Number Generators across IoT chipsets, leading to static zero-value encryption keys.