Securing the IoT: Privacy (2017)

Course details

The rapid expansion of IoT technology brings with it an array of exciting and imaginative ways to make our products smarter and our lives easier. But the growth of this emerging technology also brings with it huge gaps in security. The IoT is plagued with vulnerabilities, malware, DDoS attacks, and the potential to disrupt infrastructure.

In this course, join Lisa Bock as she explores the relationship between security, privacy, and the IoT. Lisa discusses how the vulnerabilities in IoT devices have the potential to compromise user privacy and make them more susceptible to attacks and glitches. In addition, she discusses IoT privacy concerns; existing standards, regulations, and guidelines, such as HIPAA and Sarbanes-Oxley; and proposed standards and legislation that are currently in the works to ensure the privacy of the data collected on the IoT.

Learning objectives
Security, privacy, and the IoT
Attacks and glitches
Denial-of-sleep attacks
Voice and sound attacks
IoT vulnerabilities
Glitches and compatibility issues
Privacy concerns
Existing standards and regulations
Proposed standards and legislation
Firewalls and IDS
Blockchain

Concepts

0. Introduction

01 - Securing the IoT
02 - What you should know

1. Overview

03 - Security, privacy, and IoT
04 - Internet of Things
05 - Security
06 - Privacy
07 - Massive adoption

2. Potential Attacks and Glitches

08 - Attacks and glitches
09 - DDoS
10 - Denial-of-sleep attacks
11 - IoT worms
12 - Voice and sound attacks

3. Vulnerabilities

13 - IoT vulnerabilities
14 - No malware needed
15 - Vendor backdoors
16 - Glitches and compatibility issues
17 - Army of Things

4. Privacy

18 - Privacy concerns
19 - Spying
20 - Data collection
21 - Independent devices
22 - Government
23 - Challenge - Understanding IoT vulnerabilities
24 - Solution - Understanding IoT vulnerabilities

5. Existing Standards and Regulations

25 - Standards, regulations, and guidelines
26 - PCI DSS
27 - HIPAA
28 - COBIT
29 - Sarbanes-Oxley

6. Proposed Standards and Legislation

30 - Need for standards
31 - Security legislation
32 - Discovering the IoT security foundation
33 - Using resources on NIST and OWASP
34 - IoT protocols
35 - Common IoT language

7. Securing IoT Devices

36 - Firewalls and IDS
37 - Defending against IoT malware
38 - Blockchains and Physical Unclonable Functions (PUF)
39 - Education and awareness

Conclusion

40 - Next steps