ISH Certificate “IoT – Secure Design and Operation”

Delivery: Classroom // Duration: 2 Days

Although it might be hard to describe what the Internet of Things (IoT) actually is, all peers have one aspect in common: Connectivity. Whether looking at cars, smart appliances, cameras or industrial control systems all these devices communicate with some central system or eventually expose their „legacy“ functionality via IP. Adding communication to a well known device always poses certain risks, as the Internet has many more visitors than a usual kitchen would have.

This course will give an insight into the technical implications of turning a „normal“ device into an IoT device. The course will cover all steps from device development, through the release to market and down to the end of life. For each step the typical challenges and pitfalls will be highlighted. Also an overview of currently available solutions and technologies will be given. A selection of issues will be demonstrated in practice to give an understanding about actual risks.

The training is aimed at a very diverse audience. It will give inspiration to developers but also give decision makers and marketing an in depth understanding into how things work and which aspects need to be monitored throughout the complete lifecycle of an IoT device.

Learning Objectives

This course will give an insight into the technical implications of turning a ”normal“ device into an IoT device. The course will cover all steps from device development, through the release to market and down to the end of life. For each step the typical challenges and pitfalls will be highlighted. Also an overview of currently available solutions and technologies will be given. A selection of issues will be demonstrated in practice to give an understanding about actual risks.

Target Audience

The training is aimed at a very diverse audience. It will give inspiration to developers but also give decision makers and marketing an in depth understanding on how things work and which aspects need to be monitored throughout the complete lifecycle of an IoT device.

Course Content

Part 0: The World of IoT

• History
• Current Technology
• Outlook
• Various Examples

Part 1: The Device

• Hardware Components
• Controllers & Memory
• Modules
• Interfaces & Connectivity
• LAN
• WiFi / WLAN
• Cellular – GSM, UMTS, LTE
• Debugging and Programming
• Enclosures and Maintenance // Software Components
• Firmware
• Updates
• Interfaces and Data Exchange // Overview: Various Connectivity
• SubGHz RF
• LoRa
• ZigBee
• Z-Wave

Part 2: The Backend

• Backend Technologies
• OpenSource and Commercial approaches:
  • Backend Security
  • Concentrators and Data Collectors

Part 3: Communications

• Protocols
• Encryption and Obfuscation
• Transport vs. Application Layer

Part 4: Product Lifecycle & Security

• Applying Product Security
• Quality Assurance and Security
• Incident Response & Recovery
• Patching and Updating