Name: What Embedded and IoT Developers Think About IoT Security: A Look at Survey Data
Start: 2017-04-24T17:00:00Z
End: 2017-04-24T17:00:59.000Z
Location: BrightTALK
Rating: 4.5

The Trusted Computing Group (TCG) is incorporated as a not-for-profit industry standards organization focused on developing, defining, and promoting open standards for trusted computing that will benefit users. The organization's structure has been designed to enable broad participation, efficient management, and widespread adoption of the organization's specifications.

This presentation will outline the technology concepts underlying platform integrity, one of the foundational standards of trusted computing. It will also illustrate a use case for establishing trust leveraging the TCG Trusted Computing Standard as implemented in the AMI TruE™ Platform Attestation Solution.

Remote Platform Integrity Attestation

As the focus on hardware security increases, many are vying for the top spot in a "Race to Root". TCG has several standards and work groups (Compliance, Cyber Resilience, DICE, etc) to give developers the edge and to provide the basis for a secure ecosystem. This webcast will summarize the work TCG has been doing to advance hardware security and to enable a RoT (Root of Trust) pole position.

Race to Root - Platform Integrity and Attestation

Much effort has been put into securing data at rest and in transit. But what about the network equipment at the heart of today’s connected enterprises and the huge Internet of Things? Routers, switches and firewalls remain vulnerable to attacks that can compromise these devices. 

In a webcast Wed., May 16, 1:00 p.m. Eastern/10:00 a.m. Pacific, join TCG experts Steve Hanna, Senior Principal, Infineon Technologies, Bill Sulzen,Technical Leader, Cisco Systems, Inc., and Michael Eckel, Security Engineer, Huawei Technologies for a tutorial on how to secure network equipment.

The webcast will outline key vulnerabilities and specific steps to embed network equipment with foundational security, based on a root of trust. Steve Hanna will advise attendees on key requirements and considerations for designing more secure routers, switches and firewalls and what they need to harden them against attacks, including malware.

How to Secure Network Equipment Against Attacks

Daily reports of attacks and breaches, from servers, PCs and data centers to IoT systems, mean that developers and OEMs must embed security at the foundation of their systems and ecosystem. This new webcast with long-time TPM and Trusted Software Stack expert Lee Wilson, OnBoard Security, and Philip Tricca, Intel Corporation, will review the key attributes of the TPM and how the new TCG TSS can be used for bottoms-up defense using a trust chain and improving overall platform security.

Attendees will learn about the changes to TSS to make use much easier and more efficient, how to start developing applications and resources. Use cases including key storage and software measurement will be addressed along with strong device identity and authentication. Using the TPM and TSS for health monitoring also will be discussed. 

Wilson is business development engineer at OnBoard Security, where he is responsible for technical support and business development of OnBoard Security's TCG Software Stack 2.0 (TrustSentry 2.0) and OnBoard Security's post-quantum cryptography (NTRU and pqNTRUsign).

Prior to joining OnBoard Security, Lee had a 35 year career with IBM. He currently chairs the Trusted Software Stack and Virtualized Platform Work Groups for Trusted Computing Group. Lee earned his BSEE work at Northwestern University and his MSEE work at Syracuse University and has been awarded TCG’s Key Contributor Award.

Tricca is a software architect and engineer working in Intel’s platform security division. His career began with a 7-year stint in a U.S. Air Force research lab working with open source Linux security technology including mandatory access control systems like SELinux and measured boot using the TPM 1.2 devices. Most recently Philip has found his way to Intel where his current responsibilities include transforming Intel’s open source implementation of the TPM2 Software Stack (TSS2) from proof of concept to a vibrant and sustainable OSS project.

How to Implement Trusted Platforms and EcoSystems

The rush to connect ever more devices with sensitive data and often insecure connections has created an exponential increase in associated security issues. Every day brings new reports of attacks, hacks, malware and data breaches. Fortunately, there are some widely vetted ways to help prevent many of these incidents: the TPM, or Trusted Platform Module, which can be implemented now in a number of ways. 

This webcast, with TCG TPM experts Lee Wilson, Security Innovation and Monty Wiseman, GE, will review basic trust concepts, key TPM attributes and functions,  the new library specification including newly added features, and how the TPM is used in specific applications. The implementation of the TPM in mobile, embedded and IoT devices will be addressed.

The session also will include a Q&A with attendees, so come prepared with your TPM questions.

How to Use the Trusted Platform Module (TPM) for Trust and Security

Data has exploded across devices and anything with memory. No matter where it lives and whatever it is - sensitive personal, medical, financial, business data, photos and music – all such data is highly vulnerable, In fact, breaches occur daily and the growing number of interconnected “things” means that even more data is open to attacks, theft, hacks, and loss. This webcast, featuring a leading expert on encryption and data protection, will examine just why stored-data is not always protected, the role of encryption across devices and storage systems, and how encryption can satisfy compliance regulations. The webcast will look at were to find secure data devices and how they can be deployed in the enterprise and in the IoT, as well as current and emerging standards to support growing demands and requirements for data protection and encryption.


Join Trusted Computing Group to learn how to protect data now.

Save the Data: How to Protect Data Wherever It Lives

Using Strong Device Identity, Network Security and Integrity Checks

Endpoints in the IoT by nature are vulnerable to many kinds of attacks and exploits. Widely vetted security approaches can help close these vulnerabilities while also protecting networks and data that is stored in the cloud. This webcast, hosted by Trusted Computing Group and its members GlobalSign and Cisco, will illustrate key techniques for closing critical IoT security gaps in a number of applications and endpoints.

Part one of the webcast will examine  critical security concerns that an IoT provider needs to address. These include authentication, privacy and integrity. Attendees will learn how to mitigate risks in securing trust credentials using public key infrastructure (PKI) and the international standards-based Trusted Platform Module. 

In part two, TCG experts will look at the example of smart buildings, in which endpoints must be checked for integrity, allowed safely on a network and exchange data with the cloud - all securely and without the introduction of malware or other attacks. In this example, the techniques and technologies can be applied to many endpoints, which will be addressed.

Attendees will learn key vulnerabilities of IoT endpoints, networks and data and learn how to secure them using widely available tools and technologies.

Securing IoT Endpoints, Networks and the Cloud

Loss of IP Can Cost Companies Millions – or Even the Business. Join this Webcast to Learn How to Protect Data in the Internet of Things

Attackers often use reverse engineering to locate software vulnerabilities that they then 
can exploit to create counterfeit products, steal sensitive data, or tamper with for sabotage and espionage purposes. 

In IoT and embedded systems, this can lead to serious and dangerous hacks, as recent attacks on safety-critical automotive components have shown.  How can developers protect against such attacks?

This webcast will discuss widely vetted industry standards and solutions to protect software integrity against cyber violations and safeguard the intellectual property. The webcast will provide a brief overview of the TPM and how it is being used to create secured code and licenses. Attendees will learn how these licenses can be bound to a secure element and integrated into existing business processes. Speakers from TCG members Infineon and WIBU also will answer questions about this approach.

Protecting Intellectual Property in the IoT with Trusted Computing

Securing IoT with Trusted Computing demonstration built by Trusted Computing Group member companies Cisco, Infineon, and Intel with the assistance of Applied Sciences, Rapperswil, presented at RSA 2015 during the the TCG Association Seminar and Demonstration Showcase: Should We Trust Mobile Computing, IoT and the Cloud? No, But There Are Solutions.

Securing IoT with Trusted Computing Demonstration Video by Cisco, Infineon, and

Join Stacy Cannady, Cisco Systems and Richard Nass, Embedded Computing Design/OpenSystemsMedia in a webcast Monday, April 24, 10 a.m. Pacific/ 1:00 p.m. East to talk about the hottest issue today in the IoT and embedded design: security. 

With Embedded Computing Design (ECD), the Trusted Computing Group (TCG) conducted an Internet of Things (IoT) Security Survey January to February 2017 to find if and how designers were addressing these concerns. 

The webcast will look at how designers perceive security, whether they’re including security in their designs, challenges to embedded and IoT security, and their awareness and use of trusted computing. 

Attendees will see survey results and hear from our experts on trending security issues and potential solutions to protecting devices, networks and data.

What Embedded and IoT Developers Think About IoT Security: A Look at Survey Data

Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

What Embedded and IoT Developers Think About IoT Security: A Look at Survey Data

Presented by

About this talk

More from this channel