1 Introduction

2 GTI IoT devices security model

3 Risks analysis 

3.1 Types of risks to hardware of IoT devices

3.2 Types of risks to firmware/operating system of IoT devices

3.3 Types of risks to application of IoT devices

3.4 Types of risks to data of IoT devices

4 Definitions and abbreviations

5 General security advice for IoT devices

5.1 Hardware security advice for IoT devices

5.1.1 Interface

5.1.2 Chip

5.2 Firmware/Operating System security advice for IoT devices

5.2.1 System upgrade

.5.2.2 Privilege restrictions

5.2.3 Bootup authentication

5.2.4 Service configuration

5.2.5 Partition and debug configuration

5.3 Application security advice for IoT devices

5.3.1 Pre-installed application

5.3.2 Mobile apps

5.4 Data security advice for IoT devices

5.4.1 Data transmission

5.4.2 Data Storage

5.4.3 Access control

5.4.4 Log

GTI Security Technical Implementation Guide for IoT devices