https://github.com/OWASP/IoT-Security-Verification-Standard-ISVS

https://owasp-isvs.gitbook.io/owasp-isvs-pr

Read Individual Sections of the ISVS Below

• Frontispiece
• Using the ISVS
  

https://github.com/OWASP/IoT-Security-Verification-Standard-ISVS/blob/master/en/Using_ISVS.md

• V1: IoT Ecosystem Requirements(物聯網生態系統)
• V2: User Space Application Requirements(使用者空間應用)
• V3: Software Platform Requirements(軟體平台)
• V4: Communication Requirements(通訊)
• V5: Hardware Platform Requirements(硬體平台)
• Appendix A - Glossary

基本上V1~V5是最需要關注的點，其餘其實沒有很重要 :laughing:

V1 IoT Ecosystem Requirements

• Security Verification Requirements
  • Application and Ecosystem Design(應用程式與物聯網生態設計)
  • Supply Chain(供應鏈)
  • Secure Development(安全設計)

V2 User Space Application Requirements

• Security Verification Requirements
  • Identification & Authentication(識別與驗證)
  • Authorization(授權)
  • Data Protection(資料防護)
  • Cryptography(加密機制)

V3 Software Platform Requirements

• Security Verification Requirements
  • Bootloader(系統啟動加載器;啟動程式)
  • OS Configuration(作業系統組態)
    • Linux
  • Software Updates(軟體更新)
  • Security chip integrations(安全晶片整合)
  • Kernel space application requirements(核心空間應用要求)

V4 Communication Requirements

• Security Verification Requirements
  • General
  • Machine-to-Machine(機台<-->機台)
  • Bluetooth
  • Wi-Fi
  • Zigbee
  • LoRaWAN

V5 Hardware Platform Requirements

• Security Verification Requirements
  • Design(設計)

其中的小細項其實還有更多更小的細項，礙於篇幅所以沒有補充上來，歡迎大家到官方github閱讀。