The Internet of Things (IoT) presents its own unique set of security challenges and requires a broad skillset for assessing. Our IoT assessments identify weaknesses in an entire IoT architecture including software, hardware, API, and web and mobile components.
nVisium provides top-tier IoT security solutions for our clients. As experts in the fields of web, mobile, and IoT security, nVisium draws upon decades of engineering and security experience to produce practical solutions to keep your IoT systems secure and your business safe.
Securing and testing IoT security requires a unique skill set and approach. nVisium performs an initial threat model of the IoT device’s infrastructure and performs testing against its hardware, software, APIs, as well as all the different protocols being used.
The team at nVisium performs hybrid assessments, which include a source code (web, API, operating system, infrastructure configuration, firmware, drivers, microservices, etc.) review and reverse engineering of the product(s).
nVisium will use a combination of static source code analysis and manual inspection to identify vulnerabilities in the system’s source code.
nVisium will assess the IoT system dynamically through manual interaction to find and validate vulnerabilities.
nVisium will analyze the physical devices for extraneous data leakage and pivot points that may affect the overall security posture of the IoT system and its users.
nVisium will inspect the provided binaries for flaws in compilation and deployment that may be leveraged by an attacker.
The following list contains general categories that IoT reviews will encompass. The categories of vulnerabilities specified below are not an all-inclusive list, but rather a partial view of what can be expected from an nVisium IoT assessment.
Some of our more recent projects include
One of nVisium’s key differentiators is our developer-centric approach to helping our clients. As part of a capability assessment, clients will gain an understanding of their developers progress and what to do to help them write more secure software.
“nVisium’s approach was unique and the team provided actionable findings. They strove to make our application secure and resilient.”Rich Ronston / Director of IT Security at Deltek
“nVisium has a world class application security consulting team that brings unprecedented knowledge, innovation and leadership to help train, advise and assist our development teams.”Jerry Gamblin / Lead Security Analyst at CARFAX
“nVisium performed a hybrid mobile assessment and then took those findings to build a custom security training course for our developers. The training was valuable, engaging and helpful for the developers to understand the importance of building secure software from the ground up. nVisium's training resulted in more secure code across the organization.”Tony Trummer / Director of Security Engineering at Tinder