IoT botnets like Mirai demonstrated that poorly secured connected devices can be recruited en masse for devastating DDoS attacks. Enterprise IoT security testing evaluates: default credential exposure, firmware update mechanisms, network exposure of management interfaces, segmentation between IoT devices and critical systems, and whether compromised devices can be used to pivot into the corporate network.
Technical
IoT Botnet Prevention: Securing Enterprise Connected Devices from Recruitment para empresas lusófonas
IoT devices are recruited into botnets for DDoS attacks. Testing whether your connected devices can be conscripted by attackers. Guidance for PT market.