IoT, Embedded and Hardware Security
Embedded Communication Security
We examine how your device communicates with the cloud, the mobile app and other devices. We check authentication, encryption and message integrity.
What it is
A connected device constantly exchanges data. The review covers whether this communication is encrypted and whether the other end is authenticated. It tests if messages are protected against modification and assesses protection against replay of recorded messages.
Scope
- Connections between the device and the cloud, mobile app and other devices
- Use of encryption and certificate validation
- Whether the other end is mutually authenticated
- Message integrity and replay protection
- Configuration assessment of IoT protocols such as MQTT
The need
When organizations need it
- Before your device starts exchanging data with the cloud.
- When designing how the mobile app pairs and communicates with the device.
- When asked if another device on the same network could interfere with the traffic.
Method
How we work
-
Observation
We record and analyze all device communication in a controlled environment.
-
Testing
We assess encryption, authentication and message integrity individually.
-
Recommendations
We report missing protections and the scenarios in which they cause problems.
Outcome
What you have at the end
You see the state of encryption, authentication and integrity on every communication path of your device. Missing protections are listed with recommendations.
Frequently asked questions
We use encryption. Isn't that enough?
Encryption alone is not sufficient. If the other end is not authenticated, an intermediary can still read or alter the traffic.
Which protocols are in scope?
All protocols the device uses are in scope. Every communication path is examined, including MQTT, HTTPS and proprietary protocols.
IoT, Embedded and Hardware Security
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting