*|MC_PREVIEW_TEXT|*

ioXt Newsletter Q2 2020

ioXt Alliance Newsletter The Global Standard for IoT Security

President’s Corner   Q2 Activities   hope you and your families are doing well. Even though we have not been able to visit each other, it has been nice seeing the increased use of video meetings, which have given us the chance to “see” each other during our early morning compliance workgroup calls. In other good news, I’m proud to announce the Smart Speaker team has completed their profile and set a new standard for future profile development. Through their efforts, new profiles will benefit from a thoughtful approach to identifying security issues throughout a device’s lifecycle, and then verifying the building-in of appropriate countermeasures. I’m looking forward to all the new profiles coming this year! We’ve just finished our second virtual conference, where we addressed hardware hacking and the   balance between security and the consumer’s right to repair. There were many thought-provoking presentations. FYI, these are all available on our website, in case you missed the live event. Up next is our Cellular Security Virtual Conference in late Fall, which will focus on the issues and opportunities for cellular-based IoT. Stay tuned for an announcement and more info. Once again, thanks for being a member of the ioXt Alliance. If you’re not already in one, I highly encourage you to join an Alliance workgroup! Your input and participation, as always, are deeply valued. Brad Ree CTO at ioXt   Brad Ree

Message from the Board   Mike Dow Senior Product Manager, IoT Security for Silicon Labs   There are currently several states that have enacted, or are in the process of enacting, security laws that will require “reasonable security” in IoT products. But the use of such a broad term could have a very chilling effect on our economy if someone or some organization doesn’t   step forward to help define what it means and how to verify it. I think the ioXt Alliance is very well positioned to provide leadership and guidance by giving IoT device manufacturers a forum to come together and define the requirements for “reasonable security” for a particular kind of device and then provide the means of certifying that security level.   Mike Dow

Member Company Feature   DSR Software Engineering for IoT Products   DSR Management Team Leads DSR Corporation (DSR) is a firm dedicated to “Doing Software Right.” Its two main lines of business are professional software engineering services and IOT products. Founded in 1998 and with four offices over four countries, DSR is one of a handful of companies that develop solutions covering the entire product spectrum—from the lowest (firmware layer) level to top-level user apps. The firm works across a variety of industries and sees system and data security as a top priority. Says CEO Anatoli Pechkov, “We believe the best way to overcome the security attacks and threats facing the IoT industry and further the adoption of IoT is through strong collaboration among industry leaders and adopters and unification of security standards. DSR Management Team Leads We look forward to contributing our knowledge and expertise in the area of software security within the ioXt Alliance.”   DSR Website

Alliance Member Snapshot   Brent Brooks Director of Strategic Marketing for MMB Networks   One thing that makes the ioXt Alliance unique and effective is the diversity of its membership. With security experts across the globe that span everything from consumer product manufacturers to wireless carriers to compliance labs and government organizations,   the Alliance bands together forward-thinking leaders who want to make the world a safer place. We interviewed ioXt Alliance member Brent Brooks, Director of Strategic Marketing for MMB Networks, to learn why he values being part of the Alliance and what gets him most excited about security. View what he told us here.   Brent Brooks

Press Release New Authorized Labs Selected   The ioXt Alliance, the Global Standard for IoT Security, adds four Authorized Labs to the ioXt Certification Program: 7layers, DEKRA, DTG and NCC Group. Authorized Labs are the exclusive test providers for the ioXt Alliance and perform all testing required for devices to be certified by the Alliance and to bear the ioXt Certification Mark. Read More   Certification Program Expansion   The ioXt Alliance, the Global Standard for IoT Security, expands the ioXt Certification Program to the public. The Program was defined by leading technology companies to harmonize consumer electronic security standards by which multiple third-party test labs can verify compliance of a manufacturer’s IoT device. Read More Jonathan Cartrette Director of Technology IoT Systems at Legrand North America     The ioXt Alliance, the Global Standard for IoT Security, announces the appointment of Jonathan Cartrette, Director of Technology, IoT Systems and principal architect for the Center for Software Excellence at Legrand North & Central America to its board of directors. As part of the ioXt Alliance, Cartrette has been instrumental in shaping ioXt Alliance work towards creating the internet of secure things. Read More   David Kaufman Director of Business Development at Resideo Technologies     The ioXt Alliance, the Global Standard for IoT Security, announces the appointment of David Kaufman, Director of Business Development at Resideo Technologies, Inc. to its board of directors. As a founding member of the ioXt Alliance, Kaufman has been instrumental in shaping ioXt’s work towards creating the internet of secure things. Read More

ioXt Events   Events   July All Member Webinar   Join us on July 15th at 8AM PT for our member call. CHIP Chairman Chris DeCenzo will be speaking about Amazon's involvement in the Connect Home Over IP Program. Updates will be given from the Work Groups along with a Hack of the Month presentation.   Register Here     Hardware Hacking Virtual Conference   This quarter’s vitual conference featured keynote speaker Bruce Schneier, internationally-renowned security technologist and author, plus other industry specialists who shared the most effective ways to secure device against hardware hackers, script kids and botnet infections.   6/24 LIVE STREAM - PLAYBACK AVAILABLE NOW PLAYBACK

Welcome 2020 New Members

Quarterly Hack Watch     Hack Watch   Billions of IoT Devices Are Vulnerable CallStranger Flaw Opens Door to Cyberattacks   UPnP protocol is in nearly every network device and allows devices to see one another on a network. If the system is hijacked, it can allow hackers to scan your network , potentially steal data and be used for cyberattacks like Distributed Denial of Service (DDoS). Read More     A Legion of Bugs Puts Billions of IoT Devices at Risk   Israeli security firm JSOF revealed a collection of vulnerabilities it’s calling Ripple20, a total of 19 hackable bugs it has identified in code used in internet-of-things devices. The result, the researchers say, is the better part of a billion hackable devices Read More     Serious Flaws Found in Smart Home Hubs Is Your Device One of Them?   Potential consequences include full access to the central/peripheral devices, to sensitive data, unauthenticated remote code execution and Man-in-the-Middle attacks. Read More     Hijackers Access Smart Buildings to Launch DDoS Attacks   The attacks are targeting Linear eMerge E3, a product of Nortek Security & Control. Read More

Learn More About Our Memerbership Levels   Learn More

The ioXt Alliance Is Taking Industry-Recognized Security Best Practices to the IoT Market. Join ioXt Join the Alliance Member Portal   Info About Us The Pledge News & events Certification Program   Social   © Copyright 2020 ioXt. All Rights Reserved.