Exploring IoT penetration testing
Yassine Maleh, Youssef Baddi · 2024
This chapter delves into the fundamental knowledge required for conducting Internet of Things (IoT) penetration testing (PT). It introduces essential concepts concerning the various attack surfaces present in IoT systems and lays the groundwork to assist testers in establishing an IoT testing laboratory. The discussion encompasses the current landscape of IoT PT and examines each potential attack surface domain to highlight the evolution of testing methodologies over recent years. In addition, it covers the fundamentals of firmware security, web application security, mobile application security, hardware security, and radio communication. At last, detailed guidance is provided on setting up the necessary software and hardware tools for testing purposes.