Establishing a Language of Trust
summary
Argues that trust is practical: use device identities and certificates plus verifiable credentials to tie manufacturer, model and firmware to a network; combine software bill of materials lookups and CVE feeds to score risk; embed ownership assertions and MUD-style intent so networks can enforce least privilege; points to a working reference (the NIST build five architecture) and a live continuous assurance component that is already deployed and demonstrably reduces onboarding and vulnerability errors.
AI-written summary · about
chapters (9)
- 0:00Language of trust intro
- 1:10Zero trust and trust challenges
- 3:37IoT lifecycle security
- 6:26Trust with device identities
- 10:20Device ownership and least privilege
- 13:53Compliance and vulnerability checks
- 17:26Verifiable credentials and NIST architecture
- 18:49Procurement-based onboarding
- 19:31Trust frameworks for AI
related talks
44mA Matter Of Trust: When Security Is Not Enough
28mZero Trust Architecture - Now We Must, But What It Means?
02mTrust by design: a new old requirement
24mFrom Trust Assumptions To Trust Evidence: Why PKI and Confidential Computing
26mTrust Is the Next Bottleneck: Why the Agentic Economy Needs Confidential
31mPrioritizing Trust while Creating Applications
43mThe Chain of Command: Building Trust Across Public Sector Software Pipelines
40mBuilding Trust in Supply Chains