The tools used in the search for flaws should provide reports that allow for triage. These reports should be saved by the security team to use during compliance audits.
Collect results
by Drew Van Duren, Brian Russell
Practical Internet of Things Security - Second Edition
- Title Page
- Copyright and Credits
- Dedication
- About Packt
- Contributors
- Preface
- A Brave New World
- Vulnerabilities, Attacks, and Countermeasures
- Approaches to Secure Development
- Secure Design of IoT Devices
- The challenge of secure IoT development
- Secure design goals
- Design IoT systems that mitigate automated attack risks
- Design IoT systems with secure points of integration
- Designing IoT systems to protect confidentiality and integrity
- Design IoT systems that are safe
- Design IoT systems using hardware protection measures
- Design IoT systems that remain available
- Design IoT systems that are resilient
- Protecting against jamming attacks
- Device redundancy 
- Gateway caching
- Digital configurations
- Gateway clustering
- Rate limiting
- Congestion control
- Provide flexible policy and security management features to administrators 
- Provide logging mechanisms and feed integrity-protected logs to the cloud for safe storage
- Design IoT systems that are compliant 
- Summary
- Operational Security Life Cycle
- Defining your security policies
- Defining system roles 
- Configuring gateway and network security
- Bootstrapping and securely configuring devices
- Setting up threat intelligence and vulnerability tracking
- Managing assets 
- Managing keys and certificates
- Managing accounts, passwords, and authorizations
- Managing firmware and patching updates
- Monitoring your system
- Training system stakeholders
- Performing penetration testing
- Managing compliance
- Managing incidents
- Performing end-of-life maintenance
- Summary
- Cryptographic Fundamentals for IoT Security Engineering
- Identity and Access Management Solutions for the IoT
- Mitigating IoT Privacy Concerns
- Setting Up an IoT Compliance Monitoring Program
- Cloud Security for the IoT
- The role of the cloud in IoT systems 
- The concept of the fog
- Threats to cloud IoT services
- Cloud-based security services for the IoT
- Summary
- IoT Incident Response and Forensic Analysis
- Other Books You May Enjoy
Collect results
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.