Abusing the Internet of Things: Blackouts, Freakouts, and Stakeouts
This book is a marvellous thing: an important intervention in the policy debate about information security and a practical text for people trying to improve the situation.
-- Cory Doctorow author, co-editor of Boing Boing
A future with billions of connected "things" includes monumental security concerns. This practical book explores how malicious attackers can abuse popular IoT-based devices, including wireless LED lightbulbs, electronic door locks, baby monitors, smart TVs, and connected cars.
If you're part of a team creating applications for Internet-connected devices, this guide will help you explore security solutions. You'll not only learn how to uncover vulnerabilities in existing IoT devices, but also gain deeper insight into an attacker's tactics.
- Analyze the design, architecture, and security issues of wireless lighting systems
- Understand how to breach electronic door locks and their wireless mechanisms
- Examine security design flaws in remote-controlled baby monitors
- Evaluate the security design of a suite of IoT-connected home products
- Scrutinize security vulnerabilities in smart TVs
- Explore research into security weaknesses in smart cars
- Delve into prototyping techniques that address security in initial designs
- Learn plausible attacks scenarios based on how people will likely use IoT devices
About the Author
Nitesh Dhanjani is a well known security researcher, author, and speaker. Dhanjani is the author of Abusing the Internet of Things: Blackouts, Freakouts, and Stakeouts (O'Reilly), "Hacking: The Next Generation" (O'Reilly), "Network Security Tools: Writing, Hacking, and Modifying Security Tools" (O'Reilly) and "HackNotes: Linux and Unix Security" (Osborne McGraw-Hill). Dhanjani has been invited to talk at various information security events such as the Black Hat Briefings, RSA, Hack in the Box, Microsoft Blue Hat, and the NSTAC committee. Dhanjani's work has been reported by large media outlets such as CNN, Reuters, MSNBC, and Forbes.Dhanjani is currently Executive Director at a large consulting firm where he advises executives at the largest corporations around the world on how to establish and execute multi-million dollar cyber security programs. Dhanjani is also responsible for evangelizing brand new technology service lines around emerging technologies and trends, including IoT, Big Data, Cloud, and Mobile security.Dhanjani graduated from Purdue University with both a Bachelors and Masters degree in Computer Science.Dhanjani's personal blog is located at dhanjani.com. You can follow him on Twitter here: @nitesh_dhanjani