Modern Security Model for Embedded Linux Distributions
summary
Covers how embedded Linux distributions meet modern security and privacy needs by combining existing Linux mechanisms (MAC and DAC) with newer components such as Cynara and Security Manager. Describes the complete security framework used in Tizen and in Linux Foundation's Automotive Grade Linux, showing how that design protects system-wide resources (camera, microphone, address book) and reduces burden on third-party developers.
AI-written summary · about
chapters (19)
- 0:00Start
- 3:01Common, smart devices
- 5:54Security in embedded systems
- 9:22Operating system governs services and resources
- 11:24Mission: separation
- 14:44Three pillars of security
- 15:04st pillar of security: DAC - separation of users
- 16:17nd pillar of security: Smack - separation of processes
- 19:43rd pillar of security: Cynara
- 26:08Security Manager
- 26:33Lifecycle of application: installation
- 27:26Lifecycle of application: launching
- 28:29There are some important questions
- 29:01Lifecycle of application: accessing a service
- 38:18More of important questions...
- 39:27Lifecycle of application: accessing a device
- 40:56Bonuses
- 43:53Summary
- 45:07QUESTIONS?
related talks
42mSecurity in Large Scale Embedded Linux Projects
32mEmbedded Linux Security: Dr Jekyll and Mr Hyde
59mGetting Started with Embedded Linux Security
28mOverview of the Linux Kernel Security Subsystem
34mAuthenticated and Encrypted Storage on Embedded Linux
53mSecure Embedded Linux Product - A Success Story
32mELC 2013 Security: Best Practices for Embedded Systems
45mNavigating Security Tradeoffs in Embedded Linux Systems