A Plea for Incremental Work in IoT Security
Geremy Condra · 2015
In arenas like IoT where there are a lot of unanswered questions it's often tempting to tackle the problem holistically-- developing a radically new trust model, or expanding an arcane cryptographic primitive into the root of a new architecture. But I'll argue that in IoT there's also a huge amount of lower-hanging fruit: problems which we basically know how to solve, and which when unsolved threaten to undo the security gains we've made in the last quarter century. In this talk, I'll highlight why I believe this is especially true for IoT, propose a sample of those problems and some benchmarks for how we know when we've solved them, and try to convince you of both the novelty and enduring value of pursuing these evolutionary gains.