Скачать или смотреть Navigating Security Tradeoffs in Embedded Linux Systems - Olivier Benjamin, Bootlin

Don't miss out! Join us at the next Open Source Summit in Seoul, South Korea (November 4-5). Join us at the premier vendor-neutral open source conference, where developers and technologists come together to collaborate, share knowledge, and explore the latest innovations and advancements in open source technology. Learn more at https://events.linuxfoundation.org/

Navigating Security Tradeoffs in Embedded Linux Systems - Olivier Benjamin, Bootlin

Embedded systems vary wildly in purpose, characteristics and usage. They are therefore faced with very different adversaries, that engineers and designers must take into account to achieve a secure system or product.
The tradeoff between security and convenience can only be properly arbitrated by evaluating the benefits of each security measure against the cost of its implementation, and the added complexity to the system, which will eventually be surfaced to the user.

In this talk, we will explore the security guarantees of various
security measures popular in embedded Linux systems: Secure Boot, Disk encryption, dm-verity, Secure Enclaves as well as someapplication-level security features from the point of view of what they bring to a system, and what they cost to the implementer or theuser. Ultimately, we will present what type of systems they are a good fit for, and which systems are probably better off not using them.