Unique Challenges Of Security Programs For Hardware/IoT Makers
summary
Panel lists practical steps: companies run private bug bounty programs and ship devices to vetted researchers, open-source Wireshark decoders and protocol plugins, fund UEFI training and academic grants, and host labs and internships to grow hardware skills. Operational controls include per-device unique secrets, planned key rotation, OTA updates where firmware fixes buy time, and random 3D X‑ray sampling (suggested once per 1,000 units) to detect implants. Standards work, link encryption, and secure elements are the advocated defenses.
AI-written summary · about
chapters (11)
- 0:00Introduction and panel setup
- 2:19Engaging hardware security researchers
- 8:58Opening hardware for research
- 10:46Vulnerability management in hardware
- 14:47Legacy protocols and security gaps
- 17:42Protocol migration challenges
- 20:10Role of standards and regulation
- 22:59Hardware privacy and user education
- 28:03Threat models beyond hackers
- 30:11Securing untrusted supply chains
- 34:32Q&A and closing remarks
related talks
30mSupply Chain Security for IoT Devices
29mEnabling a secure IoT from design to deployment
21mIndustrial IoT security issues and countermeasures
15mDevice Security Matters More Than Ever
29mSecuring IoT/OT Against Modern Threats
48mSecuring The Internet Of Things
18mIoT Security's Toughest Challenges: Root of Trust, TEEs, & Firmware Updates
31mSecuring the Internet of Things