Speaker

IoT is all the rage, and we all have seen many presentations that left us chuckling at the abhorrent security of these devices. Jos Wetzels takes that class of presentations one step further by leaving the smart toothbrushes and iPhone-enabled dildos behind and examining IoT devices and industrial control systems in environments where you would hope for higher standards: He looked at critical infrastructures for electric, oil, gas and water utilities. He analysed the operating systems used in cars, nuclear power plants and military fighter jets. A lot of this work was carried out under NDA conditions, but that does not prevent Jos from telling us about his lessons learnt. There is a structural problem that he discovered, the search for a decent source of entropy. Getting truly random numbers is hard, and obtaining them in a controlled setting is a contradiction in itself. He will touch on this and tell us how he thinks developers should improve IoT security.