>> Another topic bursting onto the scenes today is IoT,
the Internet of Things.
With the Internet of Things,
the idea is everything is
network ready and network capable.
That gives us so much ease to
use with these personal assistants,
games that are accessible,
and being able to be configured through Wi-Fi connection,
but will also give us all of these issues.
There's always going to be security considerations.
Often we have cool technology that comes
out and then all of a sudden we say,
it's insecure, is it?
You can see that just from a handful of
these being hacked through its Bluetooth system,
ring doorbells and ring doorbells get rid of them.
They really are a security concern
as far as privacy goes.
Then again, anything you put on
the network can be accessed through your network.
If we don't have firewalls,
if we don't have protection,
if we don't have strong authentication,
then we just have this wealth of services
we need to be compromised.
The Internet of Things is much more than
having Alexa to track your grocery list.
We're again seeing every environment
really taking advantage of this.
We have smart cities now where I can pull up to
a parking meter based on a tag of my car,
I can automatically be debited for parking.
I've got general use for controlling lighting systems,
large computer-based systems, inventory control,
just on and on and on.
Even the deployments in healthcare monitoring
with Internet of Things.
Again, these personal systems and
home monitoring tools are everywhere.
What we have to consider is as handy as some of this is,
surely there aren't any security considerations.
Of course, we built these to
be secure from the ground up.
But we know that's not true.
When we look to understand what
vulnerabilities are out there,
it's always good to know where to go.
It's always good to have a trusted, reliable source.
OWASP is one of those.
OWASP stands for
the Open Web Application Security Project.
They present a top 10 list for
a lot of different types of technology.
They primarily focus on web applications.
Every few years, they update their top 10.
Here are the most common vulnerabilities with web apps.
They also talk about other application security.
Then in 2018,
they published the top 10 issues
for the Internet of Things.
This is not testable.
For instance, you're not going to get a test question.
What's the seven most common issue
with the Internet of Things?
However, I do want to go through these.
I'm not going to spend a lot of
time on them but I do want to
communicate some of the vulnerabilities that do exist.