Hardening IoMT Medical Devices: Defense‑in‑Depth on Yocto‑Based Embedded Linux
Talkat Open Source Summit India 2026 · on Tuesday, 2026-06-16· at 15:40· Lotus Ballroom 2 (Level 3)·
summary
Yocto-based hardening for IoMT lays out a defense‑in‑depth build: hardware root of trust and secure boot with TPM/OTP fuses, minimal U‑Boot and kernel configs, read‑only rootfs plus DM‑Verity and FS‑verity and IMA for integrity, process sandboxing via AppArmor and seccomp and USBGuard for peripheral control, encrypted signed OTA with SW‑update and A/B rollback, and SBOMs (SPDX/CycloneDX) plus nightly CV‑check CI. Claims: ~75% of devices networked, >90% have known exploitable flaws, and these controls aim to produce auditable, regulatory‑ready images.
AI-written summary · about
chapters (17)
- 0:00IoMT security introduction
- 8:35Patient safety via cybersecurity
- 10:21Regulatory landscape overview
- 12:14Long lifecycle challenges
- 14:24Pre-market security design
- 15:46Threat modeling foundation
- 19:20Defense-in-depth layers
- 20:26Secure boot and chain of trust
- 21:51OS hardening on Yocto
- 24:45Integrity protection and tampering
- 26:59Runtime controls and peripherals
- 30:33Audit logging and monitoring
- 31:15Secure OTA updates and rollback
- 32:39S-BOM and vulnerability management
- 35:10Post-market security monitoring
- 36:14Key takeaways and trends
- 38:22Q&A
related talks
44mSecuring a Yocto Built System
29mEnabling a secure IoT from design to deployment
18mIoT Security's Toughest Challenges: Root of Trust, TEEs, & Firmware Updates
42mBecoming a tyrant: Implementing secure boot in embedded devices
43mDevice Security in IoT
21mIndustrial IoT security issues and countermeasures
18mBeyond the Default Password: Building Trustworthy IoT Products
42mSecurity in Large Scale Embedded Linux Projects