Securing the last mile of IoT solutions
summary
Explains that securing the IoT last mile requires hardware roots of trust and per-device credentials, demonstrates a Raspberry Pi using a TPM/DICE hardware root of trust to generate non-extractable keys and authenticate to cloud, and shows Azure tooling: Azure IoT Hub + Device Provisioning Service for zero‑touch enrollment, device twins, and staged firmware rollouts. Cites Mirai’s ~100k‑device outage (Oct 2016) and a TPM/ROCA library flaw, and demonstrates working auth and OTA update flows at scale (billions of messages / day claimed).
AI-written summary · about
chapters (7)
- 0:00Start
- 16:28Defense Strategies
- 19:33Service Assisted Communication (SAC)
- 30:59ROCA Attack
- 37:48Device Management Patterns
- 39:26Firmware Update Device app
- 46:55Azure Sphere
related talks
31mSecuring the Internet of Things
30mSupply Chain Security for IoT Devices
29mEnabling a secure IoT from design to deployment
39mApplied IoT security for healthcare and industrial
18mBeyond the Default Password: Building Trustworthy IoT Products
45mBuilding a Secure IoT Device
43mDevice Security in IoT
29mIn silicon we trust: How to fix the internet of broken things