Accelerating Development and Deployment of Updatable Linux-based Edge AI devices in the CRA era
summary
Claims: EU Cyber Resilience Act forces device makers to provide automatic, secure over‑the‑air updates and maintain security for 5 years or product lifetime with reporting of actively exploited vulnerabilities by September next year and full compliance by December 2027 compliance. Practical tools and choices cited: use containers (Docker) to separate apps, create SBOMs, enable secure boot and public‑key encryption, prefer upstream kernel support and build systems like Foundries LMP and Yocto to deliver auditable, unique builds and long‑term patching.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:27Edge AI devices pitfalls
- 3:55Software before hardware
- 6:04Linux distributions trade-offs
- 8:16Vendor support for updates
- 11:11Containers for updates
- 12:35EU Cyber Resilience Act
- 14:41CRA compliance strategies
- 16:26Best practices summary
related talks
33mImplementing the EU Cyber Resilience Act (CRA)
29mSponsored Session: Who Will Move Your Cheese ? IEC, CRA, Cyber Security
53mThe EU CRA Readiness for Contributors and Maintainers : A Survival Toolkit
44mThey're coming to regulate you!
15mKeynote: Cutting Through the Fog: Clarifying CRA Compliance in Cloud Native
22mEU Cyber Resilience Act - A Product Owner’s Approach
53mThe Cyber Resilience Act: Navigating Its Impact on Yocto-Based Products
22mUpdate Strategies for the Edge