Look Who it Was Random video

IoT Cornerstones of Security - Brian Witten - AppSec California 2016

486 views · Published 13 April 2016 · 35:21 · Indexed 14 November 2026

Channel: OWASP Foundation · 2016 · Science & Technology

Watch on YouTube

As the ever-growing billions of internet-connected devices shape our lives, through things like smart homes, connected cars, and the Industrial Internet, these devices and services need security. However, the security they must have is radically different from the security needed in traditional information technology. In contrast, IoT devices can’t have security “bolted on” after the device reaches a customer. Instead, IoT devices must have security built in from the start. Unfortunately, this is harder than it sounds, and not much guidance exists on how to do it right.  We’ll present four simple cornerstones of security for IoT. We’ll describe how each of these must be adapted to work, both practically AND effectively, in the often (very) challenging environments of IoT and the Industrial Internet. We’ll describe how these cornerstones mitigate an extremely wide range of threats. We’ll present performance data on how newer implementations of newer algorithms now make legitimate security possible even in seriously constrained environments, such as 8-bit, 8 MHz micro-controllers with only 30kb flash, and battery-constrained devices that depend on energy harvesting.

Symantec
Sr. Director of Internet of Things
Brian Witten is Senior Director of Internet of Things (IoT) at Symantec. Over the past few years, Brian has led engineering on Android, Symantec Endpoint Protection (SEP.cloud), and reputation-based security for enterprise, as well as encryption and identity technologies. Prior to that, Brian created Symantec Government Research Labs and Symantec Research Labs Europe, as well as several new technologies now used in Symantec’s enterprise and Norton consumer offerings. An experienced information security expert, Brian has worked closely with leading universities, government organizations, and industry partners in information security for 19 years. Prior to joining Symantec, Witten worked at the Defense Advanced Research Projects Agency (DARPA), the U.S. military’s central research and development organization charged with sponsoring revolutionary, high-payoff research, where he managed an R&D investment portfolio of more than $150 million in U.S. and international efforts.

-

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project

More from this channel