The Seven Properties of Highly Secure IoT Devices
summary
Connectable MCUs face real-world attacks — Mirai commandeered about 100,000 devices — so the prescription is seven concrete design requirements: hardware root of trust, small trusted computing base, defense-in-depth, compartmentalization, certificate-based authentication, failure reporting, and renewable security. Example implementation uses an off-the-shelf MCU with an on-chip security coprocessor (Microsoft Pluton), a security monitor under a cut-down Linux kernel, and a cloud security service that enforces mandatory updates, issues short-lived device certificates, and collects telemetry for anomalies.
AI-written summary · about
chapters (11)
- 0:00Start
- 1:37Connected devices create profoundly better experiences
- 4:37Internet risks highlighted by Mirai attack
- 7:46Some lessons learned
- 9:16The 7 properties of highly secure loT devices
- 17:35Meeting the properties is challenging
- 18:32Azure Sphere is an end-to-end solution for securing connected devices
- 19:10Azure Sphere defines a template for secured chips
- 20:20The Azure Sphere OS Architecture
- 21:42The Azure Sphere Security Service
- 23:01Key take-aways
related talks
31mSecuring the Internet of Things
35mIoT Cornerstones of Security
42mThe Security We Need: Designing Usable IoT Security
30mSupply Chain Security for IoT Devices
29mIn silicon we trust: How to fix the internet of broken things
29mEnabling a secure IoT from design to deployment
24mSecure architectures for the IoT
38mThe 'S' in IoT stands for Security