Fu: IoT security fails because devices blindly trust raw sensor data
Kevin Fu · Kevin Fu · Jul 28, 2017 · at 15:34
Kevin Fu, IoT security researcher, presents a core architectural takeaway on hardware security vulnerabilities in connected devices.
0:00 / 0:12exact quote · 12.2s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“So the lesson on sensors is basically trust but verify. A lot of IoT devices are taking in sensor data, and they're just acting on it blindly, but you need a way to verify that what you're sensing is actually a real physical phenomena.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Kevin Fu
Fu: Wireless signals could trigger fatal heart rhythms in cardiac defibrillators
“We discovered we could actually generate our own wireless signals that would trigger this, what is effectively a debugging command to wirelessly induce fatal heart rhythms.”
Fu: Hospital medical device malware is mostly decade-old, automated malware
“There's, it's nothing too sophisticated. We're not talking about nation state adversaries or even the kid in the basement trying to hack into things. This is garden variety malware automated, sometimes 10 or 15 years old getting in.”
Fu: Pacemakers can be tricked into shutting down via RF interference
“A fun little trick you can do is if you send a particular pulse at a rate that looks like a normal cardiac rhythm in this case one hertz, so 60 beats per minute we've been able to trick pacemakers into effectively turning off because they say, oh, the heart is…”
Fu: Wireless connectivity is added to devices for marketing, not safety
“But the interesting thing about wireless is that, you know, it was used for a specific reason, to address the clinical risk, but now I often see it used sort of willy-nilly on devices, more for the marketing side, less for actually addressing a safety risk, bu…”