Establishing and Maintaining Device Trust: A Case Study
summary
When DigitalOcean acquires a company, an Eclypsium-based agent pushes Eclypsium agent to existing endpoints to extract and analyze firmware/UEFI and BMC code, rather than buy replacement hardware. The scan maps components (typical laptop has ~65 suppliers and ~300 sub‑suppliers across 39 countries) to vulnerabilities like Log4j and speculative execution, detects integrity issues (the run found two compromised devices), enables reimaging via a factory flow and continuous monitoring, and saves >$1M versus mass replacement.
AI-written summary · about
chapters (14)
- 0:00Device trust fundamentals
- 2:33Hardware trust importance
- 5:06Firmware complexity
- 9:51Compiler backdoor lesson
- 11:37Supply chain risks
- 13:27Firmware vulnerabilities
- 16:39Firmware attacks
- 21:21Device acquisition challenge
- 25:56Device trust pillars
- 27:45Hardware trust verification
- 30:56Beyond manufacturer trust
- 32:22Steps to improve trust
- 36:39Risk-based trust monitoring
- 39:50Q&A
related talks
33mThe Various Shades of Supply Chain: SBOM, N-Days and Zero Trust
30mSupply Chain Security for IoT Devices
29mEnabling a secure IoT from design to deployment
38mSecure Software Delivery Within Untrusted Environments at Scale with EVE and K3s
41mUnique Challenges Of Security Programs For Hardware/IoT Makers
15mDevice Security Matters More Than Ever
23mBuilding an Endpoint Security program from scratch
07mEntrevista