OWASP IoT Security Verification Standard

OWASP IoT Security Verification Standard - An OWASP incubator project

About OWASP IoT Security Verification Standard

The OWASP Internet of Things Security Verification Standard (ISVS) is a community effort to establish a framework of security requirements for Internet of Things (IoT) applications. The requirements provided by the ISVS can be used at many stages during the product development life cycle including design, development, and testing of IoT applications. IoT applications are often composed of many interconnected applications that together form a complex ecosystem. Securing an IoT application thus boils down to securing the ecosystem. The ISVS, therefore, specifies security requirements for embedded applications and the IoT ecosystem in which these reside while referring to existing industry-accepted standards as much as possible. The ISVS is an open source effort and we welcome contributions and feedback. If you want to contribute additional content, improve existing content, or provide your feedback, we suggest that you do so through: • The OWASP ISVS Slack channel. You can sign up here. • Through creating an issue or a pull request. Before you start contributing, please check our contribution guide which should get you started.

Project Resources

Project Leaders

Cédric Bassem

Project Leader

Aaron Guzman

Project Leader

Project Information

Incubator Project

Classification

Other

Language

TeX

Contributors

GitHub Stars

161

Downloads

3843

Corporate Supporters

Become a Corporate Supporter Meet our Corporate Supporters Supporter Job Postings

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.