IoT Security Assessment
Product & Device Security
Smart Security for your Smart Devices
The Internet of Things (IoT) presents unique challenges for securing smart devices and connected products. We assess your full connected stack, from the hardware, firmware, operating system, software, network protocols, web services, and cloud infrastructure they interact with. Our IoT methodology includes hardware testing, penetration testing, and static code analysis. The recommendations we provide focus on applying security controls across your stack capable of defending against a sophisticated and persistent adversary.
nVisium Services
Our Approach to IoT Security
Securing and Testing
Securing and testing IoT security requires a unique skill set and approach. nVisium performs an initial threat model of the IoT device’s infrastructure and performs testing against its hardware, software, APIs, as well as all the different protocols being used.
Hybrid Assessments
The team at nVisium performs hybrid assessments, which include a source code (web, API, operating system, infrastructure configuration, firmware, drivers, microservices, etc.) review and reverse engineering of the product(s).
Services Provided for
IoT Reviews
Source Code Review
nVisium will use a combination of static source code analysis and manual inspection to identify vulnerabilities in the system’s source code.
Software & Hardware Testing
nVisium will assess the IoT system dynamically through manual interaction to find and validate vulnerabilities.
Forensic Analysis
nVisium will analyze the physical devices for extraneous data leakage and pivot points that may affect the overall security posture of the IoT system and its users.
Reverse Engineering
nVisium will inspect the provided binaries for flaws in compilation and deployment that may be leveraged by an attacker.
Features Included in
IoT Reviews
The following list contains general categories that IoT reviews will encompass. The categories of vulnerabilities specified below are not an all-inclusive list, but rather a partial view of what can be expected from an nVisium IoT assessment.
- Secure communications
- Memory corruption
- Management interfaces
- Usage of platform-security protections
- Data storage and persistence
- Cryptographic analysis
- Protocol-level analysis
- System update mechanism
- Local and remote authentication
- Authorization and access control
- Backend application and infrastructure security
- Mobile application integration
The intersection of Software and Security
nVisium integrates with your team’s existing development processes to help build a more robust software security program within your organization. Each member of our team has an extensive background in both software engineering and security.
