Securing sensitive information
With limited storage and slim margins, securing sensitive data can be a challenge for IoT devices. Often, sensitive data is stored on a client application or device so an IoT service can function without an internet connection. There are secure principles to be followed when securing sensitive data on a device. First, never hardcode secrets into firmware images such as passwords, usernames, tokens, private keys, or similar variants, into firmware release images. This also includes the storage of sensitive data that is written to a disk. This data will be accessible to attackers upon extracting firmware filesystems as well as when accessing the operating system during runtime. If hardware such as a security element ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access