Exploiting Embedded Software

Toys on the way

Embedded device limitations

Example: Java VM range

Example: JVMs and security

Example: Is this a house of cards?

Attaining software security is difficult

Builders versus operators

Security problems are complicated

BUG: The dreaded buffer overflow

Pervasive C problems lead to BUGS

FLAW: 802.11b WEP crypto

Breaking stuff is important

Knowledge: 48 Attack Patterns

Attack pattern example:
Make the client invisible

Towards a solution

The antidote: Software security in the SDLC

Best practices

Software security critical lessons

IEEE Security & Privacy Magazine

Pointers