Packt+ | Advance your knowledge in tech

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Practical Internet of Things Security

You're reading from Practical Internet of Things Security Beat IoT security threats by strengthening your security strategy and posture against IoT vulnerabilities

Product type Paperback

Published in Jun 2016

Publisher Packt

ISBN-13 9781785889639

Length 336 pages

Edition 1st Edition

Concepts

Single Board Computers

Authors (2):

Brian Russell

Drew Van Duren

View More author details

Table of Contents (12) Chapters

Preface

1. A Brave New World FREE CHAPTER

2. Vulnerabilities, Attacks, and Countermeasures

3. Security Engineering for IoT Development

4. The IoT Security Lifecycle

5. Cryptographic Fundamentals for IoT Security Engineering

6. Identity and Access Management Solutions for the IoT

7. Mitigating IoT Privacy Concerns

8. Setting Up a Compliance Monitoring Program for the IoT

9. Cloud Security for the IoT

10. IoT Incident Response

Index

Authorization and access control

Once a device is identified and authenticated, determining what that device can read or write to other devices and services is required. In some cases, being a member of a particular community of interest (COI) is sufficient, however in many instances there are restrictions that must be put in place even upon members of a COI.

OAuth 2.0

To refresh, OAuth 2.0 is a token-based authorization framework specified in IETF RFC 6749, which allows a client to access protected, distributed resources (that is, from different websites and organizations) without having to enter passwords for each. As such, it was created to address the frequently cited, sad state of password hygiene on the Internet. Many implementations of OAuth 2.0 exist, supporting a variety of programming languages to suit. Google, Facebook, and many other large tech companies make extensive use of this protocol.

The IETF ACE Working Group has created working papers that define the application of OAuth...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (2)

Van Duren

Van Duren

Drew Van Duren has provided 20 years of support to commercial and government customers in their efforts to secure safety-of-life and national security systems. He has provided extensive applied cryptographic design, key management expertise, and system security architecture design through rigorous integration of system security design with the core engineering disciplines. Drew has managed as Technical Director the two largest FIPS 140-2 test laboratories, security-consulted for the New York City Connected Vehicle Pilot Deployment, and participated in multiple standards groups such as the RTCA, SAE, and IEEE 1609 working group. Today, he supports the IEEE P1920 committee heading security architecture for unmanned aircraft aerial networks.

See other products by Van Duren

Russell

Russell

Brian Russell is the founder of TrustThink, LLC, where he leads multiple efforts towards the development of trusted IoT solutions. He has over 20 years of information security experience and has led complex system security engineering programs in the areas of cryptographic modernization, cryptographic key management, unmanned aerial systems, and connected vehicle security. He is the co-chair of the Cloud Security Alliance (CSA) IoT Working Group and was the recipient of the 2015 and 2016 CSA Ron Knode Service Award. Brian is an adjunct professor at the University of San Diego (USD) in the Cyber Security Operations and Leadership program.

See other products by Russell

Personalised recommendations for you

Based on your interests and search pattern

PLCs for Beginners

PLCs for Beginners

In this book, you'll learn programming techniques to create state-of-the-art PLC software using structured text. You'll delve into complex computer science concepts to give yourself an edge over the competition and create resounding software.

May 2024 12h 40m

PLCs for Beginners

PLCs for Beginners

In this book, you'll learn programming techniques to create state-of-the-art PLC software using structured text. You'll delve into complex computer science concepts to give yourself an edge over the competition and create resounding software.

May 2024 12h 40m

PLCs for Beginners

PLCs for Beginners

In this book, you'll learn programming techniques to create state-of-the-art PLC software using structured text. You'll delve into complex computer science concepts to give yourself an edge over the competition and create resounding software.

May 2024 12h 40m

PLCs for Beginners

PLCs for Beginners

In this book, you'll learn programming techniques to create state-of-the-art PLC software using structured text. You'll delve into complex computer science concepts to give yourself an edge over the competition and create resounding software.

May 2024 12h 40m

Internet of Things Programming Projects

Internet of Things Programming Projects

This second edition of Internet of Things Programming Projects will equip both beginners and experienced programmers with the knowledge and skills needed to create projects using Raspberry Pi, web services, LoRa, wireless communication, and MQTT.

Jun 2024 15h 16m

Internet of Things Programming Projects

Internet of Things Programming Projects

This second edition of Internet of Things Programming Projects will equip both beginners and experienced programmers with the knowledge and skills needed to create projects using Raspberry Pi, web services, LoRa, wireless communication, and MQTT.

Jun 2024 15h 16m

Building Secure Automotive IoT Applications

Building Secure Automotive IoT Applications

Critically timed for automotive IoT software engineers, this book teaches skills in vehicle architectures, cybersecurity, and the cloud. Additionally, you'll get hands-on with embedded software development.

Aug 2024 11h 56m

Accelerating IoT Development with ChatGPT

Accelerating IoT Development with ChatGPT

This book will help you leverage ChatGPT to accelerate your IoT innovation and development. You'll learn essential IoT concepts and elements, explore project examples, and complete an end-to-end application through step-by-step guidance.

Aug 2024 12h 16m