RISC V and Meta framework Security Cert Approach for a Secure Connected World
summary
Claims a reusable CSEPP meta-framework that maps Common Criteria, PSA, Alibaba ICA and IEC 62443 into a single certification path, with practical reuse of component proofs to cut time and cost. Implements five assurance levels from self-declaration up to optimized CC for a root-of-trust; example: NXP’s SE050 treated as Level 5, a microcontroller as time-boxed Level 2 (30 days of lab testing), then a product self-declares Level 1. Labs listed: Brightsight, Riscure, Trusty B; NXP is pursuing a RISC‑V secure-subsystem certification.
AI-written summary · about
chapters (11)
- 0:00Introduction and speaker intro
- 1:03Connected world and IoT complexity
- 4:22Security risks in connected systems
- 6:51Need for security certification
- 9:22Fragmented certification standards
- 11:09Introducing Caesar meta framework
- 14:01CSEPP levels and methodology
- 17:09Mapping standards to CSEPP
- 19:21NXP’s work with RISC-V
- 20:23Current status and partnerships
- 23:18Call to action and Q&A
related talks
18mProving RISC-V Security Model Compliance with SESIP
13mRISC-V: Securing the Future of Open Source Computing
09mThe Future of Embedded Security with RISC-V
17mA First Secure RISC-V Common Criteria Certified Root of Trust
25mRISC-V System-level Certification from Verification Foundations
16mKeynote: RISC-V Security - Current Initiatives and Future Trends
18mCPU Security in the Context of RISC-V
16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...