Global AppSec Amsterdam

Most tech users or consumers don't care about the intricacies of the security technologies or features in products they use, but just expect the products to work securely! If the security controls you build aren't readily usable, chances are they're ignored or turned off. That's a nightmare for IoT. The Internet of Things (IoT) is unique in that it drastically increases the number of devices that users are required to manage and use securely. As such, IoT systems do not only need to have secure defaults, but their security mechanisms shouldn’t hinder reasonable use of the system. In this talk, we shall explore the challenges of security usability in IoT. We will use real-world examples and architectural patterns to demonstrate how to design IoT security controls that aren't another tech headache... security controls that are used, not dodged.