I have a military background, covering different domains. I have experience as Incident Responder, covering areas like Digital Forensics, Malware Analysis, Phishing Detection and IoT ecosystem security.

IoT firmware analysis

This presentation focuses on an introduction to firmware analysis for IoT devices. The process relies on free and open-source tools which we can use. We will examine the security related issues and some of the bad practices found quite often in insecure IoT devices. Also we will see how to weaponize an IoT device for further attacks. 

The presentation will include: how can we obtain a firmware, what exactly can we analyze in a firmware, what kind of analysis can we do on that firmware, what vulnerabilities can be found in a firmware ( with regards to static and dynamic analysis – hardcoded credentials, insecure network services, lack of encryption), how to emulate a firmware to simulate a real device. 

Finally, we will have a presentation on how can we insert a backdoor in a firmware, thus ensuring access to the network. Also, some open source tools that help firmware analysis will be presented.