AppSecUSA 2015

Internet of Things (IoT) invites different risks and attacks as we are in the process of living in a fully connected world. There are security and privacy concerns that have no regulations for the IoT industry. In short, it is the wild west. As the relevance of IoT devices continue to rise, traction for guidelines and standards are being created. However, these standards are missing a key factor when stating "secure by design" and "privacy by design". From an insider perspective in the IoT industry, we will threat model the supply chain and development lifecycle of these IoT devices to understand the vulnerabilities in each process.