IoT Security's Toughest Challenges: Root of Trust, TEEs, & Firmware Updates
summary
Crosson claims a practical stack: a secure cross compiler for C that produces safer firmware, an AI binary scanner to find vulnerabilities without source, a hypervisor that runs or emulates vendor TEEs so ARM TrustZone or SGX apps run unmodified, and a software TE for bare‑metal MCUs plus RISC‑V support. It reports thousands of LOC in TE code with real vulnerabilities, offers a firmware update manifest that can link to an SBOM, and is largely open‑source on GitHub.
AI-written summary · about
chapters (12)
- 0:00IoT security challenges
- 1:55Root of trust in IoT edge devices
- 3:21Trust execution environments
- 5:13TEE portability gaps
- 6:59Automotive mixed criticality
- 8:47Crosson’s security I/O stack
- 9:53Trusted firmware assurance
- 12:05Secure compilation protections
- 13:33IoT firmware updates state
- 15:44Flexible secure firmware updates
- 17:28Safety-inspired firmware security
- 17:50Future directions resources
related talks
39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...
41mPanel: A New Root Of Trust: Changing Computing With TEE
29mEnabling a secure IoT from design to deployment
24mSecure architectures for the IoT
41mUnique Challenges Of Security Programs For Hardware/IoT Makers
05mmoves cyber security forward for IoT
21mIndustrial IoT security issues and countermeasures
43mDevice Security in IoT