.@ETSI_STANDARDS has released ETSI EN 303
645 V2.1.1 which outlines 13 baseline requirements for secure consumer #IoT
devices:
Since more and more #B2B #IoT solutions are getting commoditized this also
applies to commercial solutions as well.
3 replies
Replying to @coderbyheart
@ETSI_STANDARDS In order to not end up on
@internetofshit, here is the list:
- No universal default passwords
- Implement a means to manage reports of vulnerabilities
- Keep software updated
- Securely store sensitive security parameters
- Communicate securely
Replying to @coderbyheart
- Minimize exposed attack surfaces
- Ensure software integrity
- Ensure that personal data is secure
- Make systems resilient to outages
- Examine system telemetry data
- Make it easy for users to delete user data
- Make installation and maintenance of devices easy
Replying to @coderbyheart
- Validate input data