OWASP IoT Security Testing Guide (ISTG) - Aaron Guzman @OWASPGLOBAL
OWASP IoT Security Testing Guide (ISTG) - Aaron Guzman  @OWASPGLOBAL
Uploaded March 2025 | Updated September 2026, 2 weeks ago
Internet of Things (IoT) has revolutionized the way we interact with our environments, connecting billions of devices to enhance efficiency, convenience, and automation in various sectors such as healthcare, transportation, and smart homes. However, the proliferation of interconnected devices also introduces significant security challenges. IoT devices, often designed with limited computing resources, may lack robust security features, making them vulnerable to cyber-attacks. As IoT continues to expand, discovering and addressing its security vulnerabilities becomes paramount to safeguarding personal privacy and ensuring the resilience of interconnected infrastructures. This project showcase will introduce and demonstrate current capabilities of the OWASP IoT Security Testing Guide (ISTG) project released earlier this year. The ISTG comprises a comprehensive methodology for penetration tests in the IoT field, offering flexibility to adapt innovations, and developments in the IoT market while still ensuring comparability of test results. While the guide is mainly intended to be used by penetration testers, its resources may aid manufacturers and operators of IoT devices to proactively improve the security of their devices.

-

Managed by the OWASP® Foundation
owasp.org
OWASP IoT Security Testing Guide (ISTG) - Aaron GuzmanFixing My Fixing Talk: What We Got Wrong (and Right) About AI Auto-RemediationOWASP Global AppSec EU 2025 BarcelonaGlobal AppSec Dublin: Passwordless Future: Using WebAuthn And Passkeys In Practice - Clemens HübnerInfoSecMap x OWASP CollaborationThe Most Common AppSec Failures in Fortune 500 Companies and BeyondAutomatic application hardening by leveraging container runtime behavior analysis - Amit SchendelNo Admittance Except on Party Business - A Hobbits Memoir about an InfoSec JourneyOWASP Low-Code/No-Code Top 10 (LCNC) - Michael BarguryMCP Deception Incubator — Honeytraps as a Framework for Zero Trust AI Environments track 2From Maturity to Mastery: Accelerating Software Security with OWASP SAMMOWASP Global Board of Directors - May 2026 Public Meeting
OWASP Foundation |

OWASP IoT Security Testing Guide (ISTG) - Aaron Guzman

SHARE TO X SHARE TO REDDIT SHARE TO FACEBOOK WALLPAPER