How to analyze IoT devices

As we noted from the attacks, we can have a home, Small Office/Home Office (SOHO), or enterprise-grade and industrial devices.

IoT device analysis

Let’s begin by understanding how devices are structured, particularly home devices, SOHO use, or bio-medical and wearable devices.

Although they are all very different, be they routers, printers, NAS, cameras, DVRs, smart watches, insulin pumps, machines, kettles, switches, or light bulbs, we can break these devices down by their common elements:

• Physical/electronic components analysis: This is the analysis of the hardware component of the device that physically contains information and the data we’re interested in. Firstly, we can examine the device from the outside to gather valuable information such as the model name, default settings, serial codes, and IDs such as FCC certification or CMIIT, which we can use to conduct further research online.

Then, we can disassemble the...