Hardware security testing 101 (Null - Delhi Chapter)
•
0 j'aime•602 vues
Hardware Security Testing 101 - 12th July 2020
Recommandé
Recommandé
Contenu connexe
Similaire à Hardware security testing 101 (Null - Delhi Chapter)
Similaire à Hardware security testing 101 (Null - Delhi Chapter) (20)
Plus de n|u - The Open Security Community
Plus de n|u - The Open Security Community (20)
Dernier
Dernier (20)
Hardware security testing 101 (Null - Delhi Chapter)
- 1. By Arun Mane a.K.a r00tkill3r
- 2. § ./../Arun Mane § Founder and director of AmynaSec Labs § Security (Hardware,Vehicle, ICS,IoT ) § Speaker and Trainer – Defcon,Blackhat, Nullcon,HITB,HIP,Defcon….many § Reachable on twitter @rootkill3r § armane@amynasec.io 2
- 3. 3 • IoT Devices • Connected CAR/Vehicle devices – FMS,ECU etc • Medical Devices • Industrial Control System – PLC, RTU, IED, Sensors etc • Telco Devices
- 4. 4 • Publicly accessible i.e on public IP address • Backdoor access management • Hardcoded credentials • Crypto issues • Web application management issues • Etc
- 5. 5 • Web application/Cloud Security Testing • Mobile application testing • External communication testing with respect to embedded device (BLE,Wifi,Zigbee,LoRA etc.) • Hardware Testing
- 6. 6 • PCB reverse engineering (Interface or test pad identification etc) • Component identification • Analyzing Datasheet • Communication interception between IC’s (SPI,I2C etc) • Data Dump from storage • Data analysis of dumped data • Fault injection • Side channel analysis.
- 7. 7
- 8. 8
- 9. 9
- 10. 10
- 11. 11
- 12. 12
- 13. 13
- 14. 14
- 15. 15
- 16. 16
- 17. 17
- 18. 18
- 19. Questions ? 19