Can You Create a Secure IoT Platform Using a Common Linux Distro?
Talkat Embedded Linux Conference + OpenIoT Summit North America 2017 · on Tuesday, 2017-02-21· at 11:30· Galleria North·
summary
Proposal builds a gateway-first IoT platform on Fedora Atomic using OSTree and Atomic for atomic upgrades and rollbacks, containerized services for MQTT/bridging and edge processing, and hardware targets like Raspberry Pi and BeagleBone with Fedora 26 preview images. Security stacks include UEFI secure boot, minimized services, and runtime hardening via SELinux and seccomp, GCC toolchain protections and kernel self-protection. Scale plan covers staged rollouts, centralized updates, watchdog-triggered rollback, and support for ~300 Fedora devices across seven architectures.
AI-written summary · about
chapters (7)
- 0:00Intro
- 0:27Overview The Internet of things will change the world, but how do we maintain it? A Linux distribution like Fedora is a great base to define a new generation of lot but we need to balance: • Maintenance and updates
- 2:00Base Platform
- 5:35Security . Secure boot process • UEFI Secure boot, OP-TEE and friends . Dependency minimisation . SELinux, seccomp and related technologies • Toolchain security functionality
- 11:20Evolve the Gateway • Scale to 100s of thousands of gateways? • Centralised upgrade process
- 16:48Summary
- 17:52Questions?
related talks
29mFedora IoT device onboarding with FDO and Ignition
45mBuilding a Secure IoT Device
13mIBM Secure Execution for RedHat CoreOS
29mEnabling a secure IoT from design to deployment
43mDevice Security in IoT
38mThe 'S' in IoT stands for Security
30mSupply Chain Security for IoT Devices
18mBeyond the Default Password: Building Trustworthy IoT Products