Fighting IoT Cyberattacks
Katsunari Yoshioka · 2022
IoT device security has become one of the most important and challenging topics in recent years. In this talk, I will describe a framework we have developed and implemented to actively and passively observe insecure and compromised IoT devices. We have operated IoT honeypot since 2015, captured hundreds of thousands of malware binaries, and shared them with over 150 research institutes and security vendors. Our engines have also discovered a wide range of insecure and/or compromised devices from consumer-level products to those deployed at critical infrastructures. I will also explain a series of security notifications we have made to inform the stakeholders including device operators, manufacturers, and owners via ISPs, security apps, and a web service.