Protecting Your System from the Scum of the Universe
summary
A home CCTV running Linux gets hijacked, so the system design focuses on concrete defenses: hardware root of trust (ROM) creates a chain of trust to bootloader and kernel, a Merkle-tree DM-Verity root hash in firmware prevents persistent rootfs tampering, full-disk DM-Crypt protects bulk userdata, per-directory keys via FScrypt (file‑based encryption) let alarm code stay available while private files stay locked, a TEE or TPM stores keys and IMA/TPM attestation reports system state to block or report compromises.
AI-written summary · about
chapters (24)
- 0:00Introduction
- 0:19Who am I
- 1:00Storytime
- 1:34What happened
- 3:07The problem definition
- 3:47What does trust mean
- 5:11What does it mean to fail safely
- 6:57How do you build your system
- 7:46Secure Boot
- 8:20Chain of Trust
- 9:13Change of Trust
- 10:02DM Verity
- 12:05Miracle Tree
- 14:12Verity
- 16:06Full Disk Encryption
- 19:08System Setup
- 22:22Encryption
- 26:44Encryption Example
- 30:42Trust Zone
- 33:04Keyblob
- 35:24Hubble Model
- 37:52Advanced System Setup
- 38:29Integrity Measurement Architecture
- 40:10EVM
related talks
45mNavigating Security Tradeoffs in Embedded Linux Systems
34mAuthenticated and Encrypted Storage on Embedded Linux
21mIndustrial IoT security issues and countermeasures
32mELC 2013 Security: Best Practices for Embedded Systems
53mSecure Embedded Linux Product - A Success Story
40mDesign and Implementation of a Security Architecture for Critical Infrastructure
43mDevice Security in IoT
48mSecurity today: change your habits and make it safer and efficient