IoT Security Essentials for Professionals in Riyadh, Saudi Arabia

This course is designed for practitioners who are seeking to demonstrate a vendor-neutral, cross-industry skill set that will enable them to design, implement, operate, and/or manage a secure IoT ecosystem.

Course Length: 3 Days

Target Student: This course is designed for IoT practitioners who are looking to improve their skills and knowledge of IoT security and privacy. This course is also designed for students who are seeking the CertNexus Certified Internet of Things Security Practitioner (CIoTSP) certification and who want to prepare for Exam ITS-110.

Prerequisites:

To ensure your success in this course you should have a fundamental understanding of IoT ecosystems, which you can obtain by taking the following CertNexus course: Internet of Things (IoT) Practitioner (Exam ITP-110) 

Empowering You Throughout the IoT Security Lifecycle

The course delves into securing and protecting data privacy across the entire IoT lifecycle. Through interactive activities and practical case studies, you'll gain the knowledge to:

• Identify and address vulnerabilities that threaten IoT security.
• Implement risk management strategies.
• Safeguard data throughout its lifecycle.
• Ensure data privacy.
• Restrict unauthorized access to IoT resources.
• Mitigate risks associated with firmware and software development.
• Protect devices from physical and network attacks.

Outline

Lesson 1: Managing IoT Risks

• Topic A: Map the IoT Attack Surface
• Topic B: Build-in Security by Design

Lesson 2: Securing Web and Cloud Interfaces

• Topic A: Identify Threats to IoT Web and Cloud Interfaces
• Topic B: Prevent Injection Flaws
• Topic C: Prevent Session Management Flaws
• Topic D: Prevent Cross-Site Scripting Flaws
• Topic E: Prevent Cross-Site Request, Forgery Flaws
• Topic F: Prevent Unvalidated Redirects and Forwards

Lesson 3: Securing Data

• Topic A: Use Cryptography Appropriately
• Topic B: Protect Data in Motion
• Topic C: Protect Data at Rest
• Topic D: Protect Data in Use

Lesson 4: Controlling Access to IoT Resources

• Topic A: Identify the Need to Protect IoT Resources
• Topic B: Implement Secure Authentication
• Topic C: Implement Secure Authorization
• Topic D: Implement Security Monitoring on IoT Systems

Lesson 5: Securing IoT Networks

• Topic A: Ensure the Security of IP Networks
• Topic B: Ensure the Security of Wireless Networks
• Topic C: Ensure the Security of Mobile Networks
• Topic D: Ensure the Security of IoT Edge Networks

Lesson 6: Ensuring Privacy

• Topic A: Improve Data Collection to Reduce Privacy Concerns
• Topic B: Protect Sensitive Data
• Topic C: Dispose of Sensitive Data

Lesson 7: Managing Software and Firmware Risks

• Topic A: Manage General Software Risks
• Topic B: Manage Risks Related to Software Installation and Configuration
• Topic C: Manage Risks Related to Software Patches and Updates

Lesson 8: Promoting Physical Security

• Topic A: Protect Local Memory and Storage
• Topic B: Prevent Physical Port Access

Pre-Requisite

To ensure your success in this course you should have a fundamental understanding of IoT ecosystems, which you can obtain by taking the following CertNexus course:

Certified Internet of Things (IoT) Practitioner (Exam ITP-110)

Methodology

• Batch-wise training
• Practical hands-on training with real-time examples