thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

OWASP IoT Top 10

OWASP's 2018 list of the top security issues for Internet of Things devices and ecosystems.

Definition

Items include weak, guessable or hard-coded passwords; insecure network services; insecure ecosystem interfaces; lack of secure update mechanisms; use of insecure or outdated components; insufficient privacy protection; insecure data transfer and storage; lack of device management; insecure default settings; and lack of physical hardening.

Example

A camera with a hard-coded telnet password and no firmware signing maps to items 1 and 4.

Exam tip

Number one is weak/hard-coded passwords; updates and defaults also feature prominently.

Related terms