LASCON 2018 has ended
Back To Schedule
Friday, October 26 • 3:00pm - 4:00pm
Threat Modeling for IoT Systems

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
The Internet of Things (IoT) is an exciting and emerging area of technology allowing individuals
and businesses to make radical changes to how they live their lives and conduct commerce. The
challenge with this trend is that IoT devices are just computers with sensors running
applications. Because IoT devices interact with our personal lives the proliferation of these
devices exposes an unprecedented amount of personal sensitive data to significant risk. In
addition, IoT security is not only about the code running on the device. These IoT devices are
connected to systems that include supporting web services as well as other client applications
that allow for management and reporting.

A critical step to understanding the security of any system is building a threat model. This helps
to enumerate the components of the system as well as the paths that data takes as it flows
through the system. Combining this information with an understanding of trust boundaries
helps provide system designers with critical information to mitigate systemic risks to the
technology and architecture. This presentation looks at how Threat Modeling can be applied to
IoT systems to help build more security systems during the design process, as well as how to
use Threat Modeling when testing the security of IoT systems.

avatar for Dan Cornell

Dan Cornell

Vice President, Product Strategy, COALFIRE
A globally recognized software security expert, Dan Cornell has over 20 years of experience architecting, developing and securing software systems. As Vice President of Product Strategy at Coalfire, Dan works with customers and industry partners to help drive the direction of their... Read More →

Friday October 26, 2018 3:00pm - 4:00pm CDT
Duo Security Ballroom