Auth for IoT - Securing Your Smart Home

Explore the world of secure smart home automation in this 24-minute Developer Day 2021 talk by Okta's Principal Developer Advocate, Heather Downing. Learn about the security concerns surrounding IoT devices and how to protect your smart home from unauthorized access. Discover the balance between existing platforms like Alexa and DIY projects, and gain insights into implementing a zero-trust approach. Get practical tips on securing your Wi-Fi network, understanding port forwarding, and monitoring your network. Explore the benefits of using extendable platforms like Home Assistant for DIY IoT projects and learn how to implement OAuth for securing smart home skills. Understand the importance of designing devices with manual operation options and building software with a "locked by default" mindset. Gain confidence in securing existing IoT ecosystems and trying simple DIY IoT projects. Join a community of IoT enthusiasts and discover how IoT security skills can enhance your career prospects while making your home smarter and safer.

Intro
The Problem
Nobody thinks about how secure loT is - just how cool it can be. That needs to change.
While IoT is improving, it isn't perfect and you should have a zero-trust approach
There are good existing smart home ecosystems out there to leverage
Remember, some of the smart devices need to be physically replugged at times
Not uncommon to need to DIY an IOT device to cover specific use cases
Codeless Tips
Change your WiFi network's name and password
Change your router's admin username and password
Understand Port Forwarding
Monitor your network
There are no rules unless you set them
If you DIY your IOT, using extendable platforms like Home Assistant simplify.
Use OAuth to secure your Alexa/Google smart home skills.
Design devices to work manually, in addition to remotely through APIs.
Have your IOT devices do one thing well. Then add more fancy options.
Build your software like a door that is not only shut, but also locked by default. Zero-trust.
Jump in with securing existing loT ecosystem devices first for quick ROI.
Don't be afraid to try a simple DIY loT use case to explore a more secure option.
Join a developer community of IoT enthusiasts!
IOT security is a very hireable skill, in addition to making your home smarter.
Making loT devices acceptability secure rests with developers