Exploring mobile linux security with PinePhone Pro - Yifei Zhan (Everything Open 2024)

Presented by Yifei Zhan

Exploring mobile linux security with PinePhone Pro: OP-TEE security enclave,
Virtualization and beyond

The traditional security model of the desktop system is no longer suitable for
today's threat landscape, and there is a long road ahead until we can have
auditable and user-controlled mobile linux devices. This talk covers my journey
exploring Open Source Security Enclave, Virtualization, and alternative Operating
System on the PinePhone Pro with focus on security improvement for mobile linux
device.

Security Enclave or Secure element is a proven way to increase the security of a
device against compromised OS and/or hardware attack, it works by isolating
sensitive operations into a hardware backed secure environment with reduced
attack surface.

This technology is often used on mobile devices for user-hostile purposes such
as DRM or lock-in, and operates in a privileged state while being hard to audit
by the user, but this isn't always the case. With OP-TEE, it's possible to build
a Trusted Execution Environment that is open to the user and auditable, while
facilitating hardware-backed security features. In the end this can make
attacking an open source device more expensive.

https://2024.everythingopen.au/schedu...

From Everything Open 2024 - Gladstone, QLD, Australia

Everything Open is a conference focused on open technologies, including Linux, open source software, open hardware and open data, and the communities that surround them. The conference provides technical deep-dives as well as updates from industry leaders and experts on a wide array of topics from these areas.

Video licensed as CC BY-NC-SA 4.0 - https://creativecommons.org/licenses/...

Produced by Linux Australia: https://linux.org.au

#everythingopen #linuxconfau #linux #foss #opensource