Securing IoT Device Provisioning: Risk Mitigation in Low-Trust Manufacturing Environments without a Hardware Chain of Trust

This thesis provides an overview of IoT security, focusing on manufacturing process vulnerabilities and general mitigations. Through real-world industrial case studies, the work highlights that standard security practices, such as a hardware-enforced Chain of Trust, are often unfeasible due to economic and technical constraints. Nonetheless, the analysis demonstrates that implementing pragmatic software hardening and infrastructure-based compensatory controls can still achieve an acceptable level of security by effectively mitigating manufacturing risks such as cloning and counterfeiting.