IoT edge defense after Mirai — still relevant

Lessons from 2017 UTS Mirai research that still apply to edge patching and DDoS posture in Australian enterprise environments.

Mirai demonstrated how default credentials and unpatched CPE could assemble global DDoS firepower. Edge virtual patching and better supply-chain defaults remain unfinished business for many fleets.

The 2017 work with Eric Wang at UTS examined Mirai architecture and Cloudflare Orbit–style mitigation for vulnerable IoT. The threat model evolved, but the operator checklist is familiar: inventory, credential hygiene, segmentation, and rapid virtual patching where firmware lag is structural.

For Australian enterprises running hybrid campuses and industrial IoT, treat edge devices as first-class attack surface in cyber ops — not a separate “facilities” problem.