Beyond the Default Password: Building Trustworthy IoT Products
summary
Claims a practical, end-to-end build: a product stack that implements a device root of trust (true RNG, unique device identity, secure storage and secure boot with anti‑rollback), PKI with an intermediate signing key and client‑auth TLS, developer isolation and zero trust manufacturing, plus published vulnerability disclosure and EoL handling. Demonstrates a working service by shipping a system that provides isolation, certificates and secure cloud connectivity for OEMs; notes hardware churn (same product over three different silicon platforms) and constrained secure‑boot footprints.
AI-written summary · about
chapters (8)
- 0:00Secure IoT products intro
- 3:37IoT security failures history
- 6:05IoT security risks today
- 9:26Security frameworks best practices
- 10:51Nine requirements for trustworthy IoT
- 13:00Root of trust and PKI
- 15:30Zero trust for IoT devices
- 17:20Solutions for securing IoT
related talks
45mBuilding a Secure IoT Device
29mEnabling a secure IoT from design to deployment
30mSupply Chain Security for IoT Devices
31mSecuring the Internet of Things
43mDevice Security in IoT
29mIn silicon we trust: How to fix the internet of broken things
57mSecuring the last mile of IoT solutions
10mRoot-of-trust - What it is and why you need one in IoT