Issue Details
Lack of Physical Hardening
iot10 • Rank #10 in OWASP 2023
Explanation
IoT devices are often deployed in physically accessible locations where attackers can interact with them directly. Lack of physical hardening enables firmware extraction through debug ports, hardware modification, memory dumping, and physical tampering. Physical access often bypasses all software-level security controls.
Remedy
Implement tamper-evident enclosures and tamper detection mechanisms. Secure debug ports and physical interfaces. Encrypt stored data to protect against physical extraction. Implement secure boot to prevent unauthorized firmware modification. Design for physical security in deployment environments.
| Year | Rank | Category |
|---|---|---|
| 2018 | #10 | iot10 - Lack of Physical Hardening |
| 2022 | #10 | iot10 - Lack of Security Lifecycle Support |