Aaron Guzman — IoTGoat

Aaron Guzman specializes in IoT, embedded, and automotive security. Aaron is the Co-Author of “IoT Penetration Testing Cookbook”. He helps lead both OWASP’s Embedded Application Security and Internet of Things projects; providing practical guidance for addressing top security vulnerabilities to the embedded and IoT community. Aaron joins us to explore IoTGoat. IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices. He describes what it is, where it comes from, and does a demo for us on how to put it to use. Aaron joins us to explore IoT Goat. IoT Goat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.The Application Security Podcast is brought to you by Security Journey.About Security JourneyAaron Guzman specializes in IoT, embedded, and automotive security.→ Learn more about Security JourneyConnect with Aaron Guzman:→ IoTGoat→ OWASP IoT ProjectMentioned in this episode:→ IoTGoat→ OWASP IoT Project→ OWASP IoT Top 10→ OWASP Juice Shop→ OWASP Web Security Testing Guide (WSTG)→ OWASP ISVS→ Cloud Security Alliance (CSA)→ CSA IoT Working Group→ ENISAFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Aaron Guzman: Aaron Guzman — IoTGoat02:09 All right, and our guest today is Aaron Guzman, who is07:34 Aaron, I understand you are working on the project IoT Goat10:15 Aaron, when I think about vulnerable apps, I think about like11:51 Curious, where did it come from14:48 March of what year18:33 You mentioned the relationship to OWASP IoT, or at least it21:55 Now if we kind of switch gears and get more practical27:04 Just let me summarize to make sure I'm understanding correctly. So28:40 As far as the future of IoT Goat, where do you32:12 Yeah, definitely. Most definitely. So if you want to leave our