Hardware Podcasts

#008: Navigating the Changing IoT Security Landscape: A Survival Guide for Product Leaders

Coredump Sessions · 13 May 2025 · 58m · Episode 9

AI in practice: one real use of AI described

What this episode covers

Giovanni Alberto Falcione, CTO at Exine, joins Memfault's François Baldassari and Thomas Sarlandie to discuss the impact of the EU's Cyber Resilience Act (CRA) on IoT security. They analyze the shift from voluntary standards like NIST 800-53 to mandatory compliance, highlighting the critical need for runtime security monitoring and Software Bill of Materials (SBOM) tracking. The conversation details how eBPF technology enables low-overhead anomaly detection and how OTA updates are essential for mitigating vulnerabilities in the field.

AI in practice

Where this conversation describes AI being used to build or deliver a product. Part of the AI in practice tracker.

Engineering & simulation1 to 2% CPU overhead

The company uses a neural network on the edge to analyze time-series data of system calls for key processes, predicting the next expected system call to detect deviations from normal behavior and identify security anomalies.

“We look the time series of CSOs for some key processes … we use this data to develop models that look at like a past window of CSCOs and use that context to predict what the next CSCO is going to be. … if the actual behavior starts diverging from the one it has learned, then we start to see this score increasing.”

Giovanni Alberto Falcione · Hear it at 47:29

Most relevant to

companies scaling up

Topics

Mentioned

Companies
Exine, Memfault
Products
OpenSSH, Zephyr
Tools
eBPF, Yocto
Also
Cyber Resilience Act, NIST 800-53

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 10m

    515: Script Boomers

    Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

    Security & privacyConnected products & IoT
    8 chapters

  • IoT For All Podcast · 28m

    The State of IoT Development | The Eclipse Foundation's Frédéric Desbiens | Internet of Things Podcast

    Frédéric Desbiens, IoT and Edge Computing Program Manager at The Eclipse Foundation, discusses findings from the 2024 IoT & Embedded Developer Survey Report, highlighting industrial automation and automotive as leading sectors. He details the shift toward sustainability, the critical importance of security measures like post-quantum cryptography and over-the-air updates, and the growing adoption of safety-critical certifications such as ISO 26262. The conversation also covers the rise of open-source hardware, specifically RISC-V and the Open Hardware Foundation, alongside protocol trends like MQTT and SPOT Plug.

    Connected products & IoTSecurity & privacy
    7 chapters

  • IoT For All Podcast · 17m

    How to Succeed with IoT Software | Northern.tech's Eystein Stenberg | Internet of Things Podcast

    Eystein Stenberg, CTO and co-founder of Northern.tech, discusses the increasing dominance of software in IoT product development and the resulting time-to-market pressures. He highlights that software is now the primary differentiator and source of launch delays, with AI adding complexity to device lifecycle management. Stenberg advises OEMs to make explicit build-versus-buy decisions regarding infrastructure, such as Mender for OTA updates, to avoid technical debt and ensure compliance with regulations like the EU Cyber Resilience Act.

    Connected products & IoTAI & machine learning
    6 chapters

  • IoT For All Podcast · 17m

    Navigating the Future of Embedded Computing | Toradex's Daniel Lang | Internet of Things Podcast

    Daniel Lang, Chief Marketing Officer at Toradex, discusses the evolution of embedded computing, focusing on the shift from Windows CE to Linux-based solutions and the integration of AI at the edge. He explains how Toradex’s Torizon platform addresses cybersecurity regulations like the EU Cyber Resilience Act (CRA) and FDA guidelines through secure over-the-air updates and vulnerability monitoring. Lang highlights trends in tiny ML, predictive maintenance, and the increasing importance of security in critical infrastructure sectors like power and industrial manufacturing.

    Embedded firmwareSecurity & privacy
    6 chapters

  • IoT For All Podcast · 18m

    What is Device Lifecycle Management? | Northern.tech's Eystein Stenberg | Internet of Things Podcast

    Eystein Stenberg, CTO and co-founder of Northern.tech, explains that device lifecycle management (DLM) is essential for OEMs transitioning to software-driven business models. He details the five stages of DLM—design, manufacture, commissioning, maintenance, and decommissioning—and argues that over-the-air (OTA) updates via tools like Mender are foundational for security and regulatory compliance, particularly under the EU Cyber Resilience Act. Stenberg highlights risks such as security vulnerabilities and fleet-breaking updates, while citing ZF Group as a customer leveraging Mender for autonomous vehicle management.

    Connected products & IoTSecurity & privacy
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Coredump Sessions. The episode itself belongs to its publisher.