Mind Your Roots of Trust!
Guy C. Fedorkow, Thomas Hardjono · 2024
The cybersecurity for IoT devices is often an afterthought, as they often have little need for a "human interface". If IoT designers think about security at all, they may follow the "hard and crunchy on the outside, soft and chewy inside" model, which emphasizes perimeter defense, on the theory that if hackers can't get in, they can't do damage. The catch is that even the smallest IoT devices may have a software stack that's too complex for the designers to comprehend as a whole, usually leading to obscure vulnerabilities in dark corners of the code, where normal designers would never look.