(In)secure Things
summary
Open Source dominates IoT but often lacks production-grade security: surveys show 78% of companies use OSS, 89% say it speeds innovation, yet 67% do not monitor it for vulnerabilities; DROWN left 11 million sites at risk. Practical fixes include formal supply‑chain processes like OpenChain, binary scanning with the binary analysis tool (BAT) that fingerprints symbols and strings (no reverse engineering), and fuzzy matching via TLSH similarity matching as used in a commercial product that packages BAT for on‑site or cloud use.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 2:28Open Source
- 4:47The Catch
- 9:36Open Source Security
- 12:17The Big Picture
- 15:38OpenChain
- 18:10Update Process
- 20:24Automation
- 22:15Wishlist
- 24:28Case Study
- 25:20Open Source Project
- 28:28Commercial Solution
- 31:08Other Tools
- 34:53Big Picture
- 40:48Participation
- 45:28Solution
- 47:40Disadvantages
- 49:43Software Heritage
related talks
35mOpen source security: Opportunity or oxymoron?
28mKeeping Networks Secure: The Open Way
18mIT Security – Don’t let Open Source Software become the next menace
49mTrustworthy Open Source: The Consequences of Success
38mApplication Security in the age of Open Source- 28mKeeping Networks Secure: The Open Way
44mNavigating Open Source and Open Standards for Better Cybersecurity
11mSupply Chain Cybersecurity