Device Security in IoT
summary
Covers concrete device protections and an open source reference implementation: Trusted Firmware for M implements PSA concepts like an immutable root of trust, a chain of boot-time signature checks, and a sandboxed secure partition manager so keys never leave the secure domain. Describes a firmware update flow where a nonsecure client downloads an image, the secure world authenticates it, bootloader enforces anti-rollback via non-volatile counters, and hardware primitives such as a hardware unique key bind storage to the device for lifecycle and attestation.
AI-written summary · about
chapters (13)
- 0:00Intro
- 0:51Common Usage Patterns
- 3:41Security Challenges
- 6:21Common Security Functions
- 9:46Root of Trust and Chain of Trust
- 13:19Principle of least Privilege
- 17:16Firmware Update
- 19:37Device Identification and Authentication
- 21:55Lifecycle Management
- 24:20Hardware Building Blocks
- 31:31Platform Security Architecture
- 32:41Introduction to TEM
- 36:58Communication Security and Test Establishment
related talks
45mBuilding a Secure IoT Device
30mSupply Chain Security for IoT Devices
29mEnabling a secure IoT from design to deployment
51mTrusted Firmware M : Secure Storage
31mSecuring the Internet of Things
24mSecure architectures for the IoT
18mBeyond the Default Password: Building Trustworthy IoT Products
21mIndustrial IoT security issues and countermeasures