Embedded Technologies Expo & Conference 2020

Whether you are securing the world’s most sophisticated defensive systems protecting the nation’s top secrets, your online banking account, or building a baby monitor—security matters. This session looks at several “real world” scenarios, where system intrusion either occurred or could have. From the most adversarial suspects, to the benign access of common systems, a holistic approach to security is necessary in order to protect sensitive data, keep systems operational, and most importantly, allow devices to safely do their intended job and not someone else’s. Because modern hackers are always trying to gain an edge, a security-minded engineering focus, along with diligence, is necessary throughout the entire software design lifecycle. This session looks at ways to establish a “root of trust” and key storage as the foundation of a secure system. Then, it explores securing the software used to create these systems, protecting the device as it undergoes Software Over the Air updates, and what to do when keys can no longer be trusted. This session includes discussion on how to guard data-at-rest within a device’s storage and data-on-the-move with these systems being networked. Anywhere data can be uncovered, it can be exploited. It talks about employing personas in order to limit access to sensitive data to those that are authorized, and methods to support multiple levels of security within a system. Finally, detecting anomalies within a system exposing potential illicit activity is addressed.