A Surface Area Approach to Penetration Testing the Internet of Things
Daniel Miessler presents a comprehensive attack surface mapping methodology for IoT, systematically auditing cloud APIs, mobile apps, local networks, and hardware.
Summary
The Multi-Tiered Architecture of IoT Ecosystems
Internet of Things (IoT) products consist of four interdependent attack surfaces: device hardware, local network protocols, mobile companion apps, and cloud backend APIs.
Systematic Attack Surface Mapping Methodology
Daniel Miessler outlines a structured pentesting framework, dissecting each tier for recurring architectural weaknesses and misconfigurations.
Common High-Impact IoT Vulnerability Classes
Miessler details unauthenticated cloud API endpoints, insecure local UPnP/MQTT broadcasts, hardcoded embedded credentials, and exposed UART debug headers.
Actionable Guidelines for Product Security Teams
The author provides threat modeling templates and remediation checklists for IoT manufacturers building secure-by-design connected devices.
Related talks
Village Presentations·44 min
Aaron Guzman
Belkin penetration tester Aaron Guzman breaks down the OWASP IoT Top 10, demonstrating firmware extraction, API reverse engineering, and defensive hardening.
OWASP Foundation·34 min
Ken Prole
Ken Prole details OWASP Code Pulse and Attack Surface Detector.
OWASP Foundation·21 min
Daniel Miessler
Daniel Miessler examines OWASP IoT Top 10.