Skip to content

IoT Security and Manufacturers Q and A Panel

IoT Security and Manufacturers Q and A Panel

Summary

### Security Challenges Across the IoT Manufacturing Lifecycle At 00:00, a panel of hardware manufacturers, semiconductor designers, and security researchers convenes at the IoT Village to discuss security challenges across the consumer IoT device lifecycle.

### Insecure Home Routers and Perimeter Devices At 09:48, the panelists examine vulnerabilities in consumer gateway hardware. They discuss how poorly secured home routers and IoT appliances remain unpatched in residential environments for years, creating large pools of vulnerable devices exploited by botnets.

### Supply Chain Fragmentation and Third-Party Dependencies At 19:49, the discussion explores supply chain complexities in hardware development. Device manufacturers rely on third-party System-on-Chip (SoC) vendors and open-source software libraries, complicating vulnerability management and long-term patch distribution across product lines.

### Eliminating Attack Surfaces by Design At 29:52, panelists outline foundational hardware security hygiene. They advocate for disabling physical debug headers (UART/JTAG) before shipping, mandating unique per-device passwords, and integrating hardware root-of-trust chips to support secure boot verification.

### Treating Security as Engineering Quality Concluding between 40:11 and 48:00, the panel emphasizes that security must be integrated as an essential component of software quality. Panelists urge manufacturers to establish clear vulnerability disclosure programs and implement automated over-the-air update mechanisms to safeguard connected devices over their operational lifespans.

(AI summary — Gemini Flash)

Related talks

IoT Village·39 min

  • DEF CON
  • Red Team
  • Date: Aug 2018
  • Location: Las Vegas

Ben Nassi

Smart irrigation systems, a new IoT device which is aimed at saving water and money, have already been adopted by smart cities (e.g., Barcelona), agriculture, and the private sector around the world and will replace e...

iotexploitationprivacy+2

IoT Village·37 min

  • DEF CON
  • Policy
  • Date: Aug 2019
  • Location: Las Vegas

Elvis Collado

This talk is about how an unauthenticated heap-based buffer overflow vulnerability was discovered and exploited within a router distributed by a market-leading ISP. Despite the targeted process utilizing mitigations s...

iotexploitationdevice-hacking+2