What You Need to Know About OWASP
The Open Web Application Security Project (OWASP) is an international community that helps organizations conceive, develop, acquire, operate, and maintain open applications you can trust. They provide free tools, documents, forums, and chapters to help improve application security.
What you need to know about OWASP is they just released their 2018 OWASP IoT Project that lists ten potential security risks on which the IoT community needs to improve. They suggest you avoid the items on the list when building, managing, and deploying an IoT system.
OWASP developed the following list specifically for manufacturers, enterprises, and consumers to help each address the highest priority items in IoT security:
What this means for you
Whether you’re a consumer of IoT devices, a design engineer, or a technician responsible for deploying an IoT system, use the above list to help you make better security decisions. Also, this report contains the most current advice from the OWASP community as of the end of 2018. OWASP updates its list every two years to accommodate changes in the industry and address expansion of the IoT. Expect the next report in 2020.