IoT Armor: An IoT Secure-by-Default Educational Toolkit

As the number of connected IoT devices continues to increase, concerns over their security have grown exponentially. Reports suggest that cyber-attacks on these devices could lead to an estimated loss of $116 billion per year by 2023. To tackle this issue, the UK government is introducing the Product Security and Telecommunications Infrastructure Bill, requiring a minimum level of security for all IoT devices sold in the UK. Despite the government's initiatives, there is still a significant void in the implementation of these security principles due to a lack of educational resources.

IoT Armor addresses this gap with the help of an educational toolkit that provides hardware roots of trust for IoT devices using a Single-Board Computer (SBC) module tailored with a Trusted Platform Module (TPM) 2.0. The toolkit aims to provide simple tutorials, sample codes, and explanations to enable sound implementation of security measures, such as secure boot, remote attestation, device tamper detection, secure communication, and device authentication/verification. Overall, the development of this educational toolkit will help in promoting cybersecurity education and skills across the population, especially among developers with limited security knowledge or resources, to improve the overall security of IoT devices.