Enhancing Cyber Resilience and Sustainability in Critical...
summary
Civil Infrastructure Platform provides an Industrial Grade Linux base layer that offers 10+ years maintenance, a reference image with 142 packages, and claims it meets >90% of IEC 62443‑4‑1 requirements after completing a 4‑1 gap assessment. It uses reproducible builds (amd64, arm64, armhf progress), debian CV scanning/dep‑scan tooling, automated CV filtering for kernel configs, and is integrating swupdate with TUF/wfx for signed, key‑rotating secure updates while working toward IEC 62443‑4‑2 compliance.
AI-written summary · about
chapters (8)
- 0:00CIP and cyber resilience intro
- 7:46How CIP enhances resilience
- 11:03CIP security working group
- 20:37Testing and compliance in CIP
- 24:09Secure software updates in CIP
- 29:27CIP compliance with IEC 62443
- 32:48Summary and ecosystem collaboration
- 35:22Q&A and closing
related talks
43mCIP (Civil Infrastructure Platform): Reusing and Strengthening OSS Component Securi...
17mAccelerating Development and Deployment of Updatable Linux-based Edge AI devices in the CRA era
33mImplementing the EU Cyber Resilience Act (CRA)
32mImplementing and Validating Linux Cyber Security Requirements: SEAPATH, a Case Study
33mBuilding Images For The Secure Supply Chain
38mSEAPATH: Configuring and Testing an Industrial-Grade Linux Platform for Critical Real-Time Applications in the Energy Sector
29mSponsored Session: Who Will Move Your Cheese ? IEC, CRA, Cyber Security
26mEngineering for the Long Haul: Operating Open Source at Scale