Open Source Summit North America 2022

I recently posted a support question to a major cloud provider to see how my embedded devices could securely connect with their private container registry. The answer - create a file with a username/password on each device. We can do better. We deserve better. Security for embedded products is complicated. There are multiple layers and dimensions so that "security" can't be turned into a simple one paragraph answer. However, if we step back to some first principles, we can create a mindset and approach for building secure embedded products. This talk will cover ways to secure an embedded device. Hardware Security Modules(HSMs) and what they can do secure communication to the cloud will play a staring role. Topics like x509 PKI basics and ECIES encryption for securing data on devices will be covered as well. In the end, you'll be armed with some tricks to make your embedded product a little more secure.