Securing Cloud and IoT Applications

• An understanding of networking principles.
• Programming experience in any language.
• A cloud provider account.

Audience

• Developers
• Security professionals
• IoT architects

IoT application security refers to the technology and processes used to develop, manage and monitor the applications that control networked devices in an IoT system.

This instructor-led, live training (online or onsite) is aimed at engineers who wish to set up, deploy and manage a secure IoT application.

By the end of this training, participants will be able to:

• Develop and deploy applications to manage IoT devices securely.
• Securely integrate IoT devices to the Cloud.
• Integrate an IoT application with existing infrastructure.

Format of the course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• This course can be based on any of the major cloud providers: AWS, Google Cloud, and Azure.
• To request a customized training, please contact us to arrange.

Introduction

Preparing the Development Environment

• Device, development tools, SDK

IoT Security Services

• AWS IoT
• Google Cloud IoT Core
• Microsoft Azure Sphere

Planning an IoT Application

• Deciding Application Features
• Types of Device: Sensors, LCD Screens, Buzzers, etc.
• Certified vs Non-Certified IoT Devices

Anatomy of an IoT Device

• Microcontroller, Sensor, Battery, etc.

The IoT Ecosystem

• An architectural overview
• Cloud server security
• Device security
• Application security

Case Studies: Hacking a Home's Temperature Sensor.

IoT Security Lifecycle 

• Security engineering processes
• OWASP Internet of Things (IoT) Project

Designing a Secure IoT Application

• Secure Communications (HTTPS, TLS/SSL, etc.)
• Data Integrity (Encryption, Hashing, etc.)
• Identity and Access Management

Scaling an Application

• Fault Tolerance

Integration IoT Devices into Existing Security Infrastructure 

• Extending existing systems

Deploying an IoT Application

• Monitoring the Application
• Testing the security of the application

Assessment

• IoT Privacy Impact Assessment (PIA)
• Safety Impact Assessment

Troubleshooting

Summary and Conclusion