KEYNOTE Code Sweat: Embed with Nightmares
summary
Keynote warns embedded Linux devices are already attack surfaces: cites November 2, 1988 Morris worm and Stuxnet, notes 2.5 CVEs per week in the kernel, and a cursory scan finding 172 public power-control panels. Recommends concrete fixes: add package and firmware updaters (mentions Fenris updater), integrate an SE Linux layer, run Bastille-style scans, use measured boot with TXT/TPM/tboot plus remote attestation, and harden toolchains and virtual appliances; several Yocto/“Octo project” components and demos are ready or in development.
AI-written summary · about
chapters (20)
- 0:00Intro
- 0:31Vax 11750
- 1:09Virus
- 3:56Morris Worm
- 4:58Privacy Security
- 5:58Zeroday bugs
- 6:54Power plant software
- 8:07Spy vs Spy
- 9:46Smart Dust
- 11:24Linux Exploits
- 11:48Cassandra
- 12:45Yocto
- 15:35SELinux
- 16:17Toolchain Armor
- 16:48Bastille Linux
- 17:10WebHut
- 18:26Web Kiosk
- 20:09Intel
- 20:33Tboot
- 22:12Cloud
related talks
20mKeynote: Outsmarting IoT Defense: The Hacker's Perspective
23mKeynote: Fireside Chat with Window Snyder & Katherine Druckman
01h 00mKeynote - Our Kryptonite: A Defendable Internet
11mKeynote: Securing Open Source
28mKeynote: Window Snyder, Chief Software Security Officer, Intel in conversation with Jim Zemlin
51mKeynote |The Microarchitectures That I Saw And The Ones That I Hope To One Day See
44mNight of the living vulnerabilities
51mLocknote: Conclusions and Key Takeaways