YoVDO

Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Cloud Computing Courses MQTT Courses Authorization Courses IoT security Courses Denial-of-Service Attacks Courses

Course Description

Overview

Explore the first systematic study on security vulnerabilities in leading commercial IoT cloud platforms' integration of MQTT for device-user communication. Discover how authentication, authorization, and session management additions to the protocol are vulnerable, potentially allowing adversaries to control devices, launch large-scale denial-of-service attacks, steal secret data, and fake device status. Learn about the security implications for major platforms like AWS IoT Core, IBM Watson IoT, Azure IoT, Google Cloud IoT, Alibaba IoT, and Tuya Smart in this 37-minute Black Hat conference presentation by Yan Jia, Luyi Xing, and Yuqing Zhang.

Syllabus

Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds


Taught by

Black Hat

Related Courses

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Black Hat via YouTube Attacks From a New Front Door in 4G & 5G Mobile Networks
Black Hat via YouTube AAD Joined Machines - The New Lateral Movement
Black Hat via YouTube Better Privacy Through Offense - How to Build a Privacy Red Team
Black Hat via YouTube Whip the Whisperer - Simulating Side Channel Leakage
Black Hat via YouTube