The Internet of Things (IoT) is considered to be the next phase of the Internet revolution - linking more and more objects of the real world to the virtual world and enabling anytime, anyplace and anything communication.
Due to the fast increase of popularity and distribution, the IoT will become an interesting target for attackers.
Since it is getting more and more common for IoT devices to communicate over wireless channels, direct physical access to the targeted systems or network is no longer necessary. The attack range is only dependent on the antennas used and the power of their transmitters.
This talk will provide an overview of typical problems during security assessments of IoT devices. All focused on the needs of a typical penetration tester.
Mr. Tobias Zillner
Tobias Zillner runs his own security consulting company and works as independent researcher on security projects. He conducts information systems audits in order to assess compliance to relevant internal and external requirements and to provide a customers management with an independent opinion regarding the effectiveness, and efficiency of IT systems. Furthermore, Tobias evaluates and assures security of Information Technology by performing webapplication and web service penetration tests, source code analysis as well as network and infrastructure penetration tests. He has a Bachelor degree in Computer and Media Security, a Master degree in IT Security and a Master degree in Information Systems Management. Tobias is an expert in the field of wireless security assessments and has spoken at several well known international security conferences like Black Hat USA / Asia , Defcon, BSides, CRESTcon or DeepSec.