Workshop on the Fundamentals of IoT Forensics

Overview

Recently, with the sheer popularity of IoT devices, the number of malware focusing on IoT has multiplied exponentially.

This could be attributed to the large number of IoT devices we use in our everyday lives, from smartphones to vehicles, kitchen appliances, and television sets - that all contain IoT. Hence, the impact of a malware attack can be very critical and potentially life-threatening.

This course provides an introduction to IoT forensics. It caters to people from beginner hobbyists to security consultants to senior management.

Whether you are a technical person who likes to get your fiddle with IoT hardware or a senior management who wonders how to reverse engineering an IoT device, this course will provide the basic knowledge you need.

This 2-day workshop seeks to introduce and equip an individual with knowledge and skills of various tools to extract firmware from an IoT device. Hands-on practicals will be conducted in both afternoon sessions to complete the workshop.

Who Should Attend

• White Hat Hackers

• IoT Vulnerability Engineers

• HTX, CSA

Prerequisites

• Basic computer engineering skills

• For this beginner course, no prior electronic knowledge is required

• Basic Linux commands such as directory listing, executing of scripts

What You Will Learn

Tapping into IoT devices from serial-port

• Introduction to Serial Communication

• Necessary Linux Shell commands

• Hands-on practical to identify and obtain access to the Linux shell

Tapping into IoT devices from JTAG-port

• Introduction to JTAG Protocol

• Introduction to Firmware analysis

• Hands-on practical on using Open-source tools

• Hands-on practical to identify JTAG pins and obtain access to extract the firmware

Extracting firmware directly from flash memory

• Flash Memory used in IoT devices

• Tools of the trade

• Hands-on practical to identify flash memory and extract the firmware