Demos

No firewall

• Install Rasbian
• Install WoTT Agent
• Claim device
• Show trust score
• See vulnerabilities in dashboard
  • No firewall
  • Default credentials
• Display recommended actions
  • No firewall enabled
  • Default credentials found
• Fix firewall and default credentials
• See status reflected and an updated trust score

Blocked by:

• Firewall on recommended action
• Dynamic trust score
• Default credentials

Remotely block an open port

• Install Raspbian
• Install telnet
• Install the WoTT agent and claim the device
• View the trust score and open port
• Block the open port using the web interface

Remove hard coded credentials

• Deploy a sample app with some API key
• Walk the user through the scenario and the problem w/ rotating said key
• Install the WoTT agent and update the code to read the key from the agent

Blocked by:

• Credential mgmt

Device compromised

• Install Raspberry Pi w/ WoTT agent
• Install Falco
• Enroll the device in the dashboard
• View the status
• Launch Falco's "event-generator" on the device to simulate an attack
• Display the logs popping up in the dashboard

Blocked by:

• Falco support

Google Core IoT

Blocked by:

• API keys (or client cert) and script or
• Native Google integration