Thoughts and tools for practical testing against upcoming regulation
- 18031-1: Network connected device
- 18031-2: Devices handling personal information, smart toys, etc..
- 18031-3: Devices handling financial assets
https://www.european-cyber-resilience-act.com/Cyber_Resilience_Act_Annex_1.html
IoT Meter 3, three dimensional metrics for quality of cybersecurity in internet-connected devices Contains the metrics, as well as guidelines for collecting evidence from the devices
Project home: https://github.com/Zokol/ITM3
Started as a simple python-script to find geoIP of pcap-traffic. Now does a bit more, producing for example statistics and visualization from network packet capture
Project home: https://github.com/Zokol/pcapMapper
I needed a simple browser-based tool to inject notes into the network traffic. Mostly used for notekeeping during testing of physical devices, allowing forming connection between user actions (registering a device via mobile app) and the collected network traffic.
Project home: http://note.juva.lu
Source: https://github.com/Zokol/note