Strong Auth Supply Chain
summary
Since 2016 a production SCADA/MFA pipeline uses ubotp keyboard emulation YubiKeys for confirmation-of-control (press key to open/close breakers) and a YubiHSM key exchange to lock secure microcontrollers with test firmware at silicon, then decrypt and unlock devices at final assembly; validation software is recoded validation server in .NET and deployed across utilities and data centers. That works today, but migrating to FIDO for phishing-resistant challenge/response raises RDP/HID bi‑directional, synchronization and 10+ year device‑lifecycle challenges.
AI-written summary · about
chapters (10)
- 0:00Introduction to talk
- 2:13Critical infrastructure threats
- 3:57OT vs IT networks
- 7:48OT device complexity
- 11:37Supply chain security with HSM
- 14:27Multi-factor authentication use case
- 16:30Transition to FIDO challenges
- 19:43OT environment constraints
- 22:09Authentication in SCADA systems
- 23:33Future of MFA in OT
related talks
32mSecuring Online Identities with Simple, Secure, Open Standards
27mWebAuthn, Yubikeys, and You: What we wish we knew before...
47mWhy FIDO Security Keys & Webauthn are Awesome
56mPasskeys 101: Technical Principles of FIDO
22mGuarding the Gate: Strategies for High Security with Passkeys
24mAchieving strategic outcomes with FIDO: The phishing-resistant user
33mSimple. Open. Mobile: A Look at the Future of Strong Authentication
15mUp your SSH security game