Aditya Gupta -- The Exploitation of IoT

Why can an IoT product look secure in one component and still fail as a complete system? Aditya Gupta, founder of Attify, joins Chris and Robert at AppSec USA to examine the gaps between hardware, firmware, radio communications, mobile applications, and web dashboards. He explains how fragmented development teams and unfamiliar protocols create security blind spots, and why authentication and secure design need attention before devices ship. The conversation covers resource constraints, firmware updates, physical access, and the way extracting information from one device can enable attacks against many others. Aditya also discusses practical learning resources and encourages developers to understand their entire product architecture rather than assuming that securing individual pieces will secure the whole.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Aditya Gupta:
→ Aditya Gupta and Attify

Mentioned in this episode:
→ Attify
→ OWASP IoT Top 10

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 The exploitation of IoT with Aditya Gupta
00:46 Aditya’s path from mobile security to IoT
02:03 Defining the Internet of Things
02:58 Where IoT development goes wrong
04:03 Security gaps between components and teams
05:48 Authentication failures and secure design
07:03 Practical security steps for developers
07:58 Protocol fragmentation and resource constraints
09:10 Designing the complete IoT system
11:17 Updating devices after deployment
17:30 How physical access exposes larger attack paths
20:48 Resources for learning IoT security