Hardware Podcasts

258: Security Is Another Dimension

Embedded.fm · 30 Aug 2018 · 59m · Episode 258

What this episode covers

Axel Poschmann, head of the hardware security lab at DarkMatter, discusses embedded security as a trade-off against usability and cost, emphasizing that perfect security is impossible. He outlines a practical workflow for securing IoT devices, including threat modeling, using constant-time crypto libraries, and leveraging low-cost third-party testing or university collaborations when budgets are tight. Poschmann also explains how hardware countermeasures like fuses and physical obfuscation raise the barrier for attackers, referencing standards like Common Criteria and resources such as Christof Paar’s cryptography lectures and ENISA’s guidelines.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
NXP
Also
ENISA, Christof Paar, Hardwear.io

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 55m

    042 - Diwali in the Morning

    Asmita Jha, an IoT security consultant at Payatu, discusses her transition from embedded firmware development to hardware security and reverse engineering. She details her workflow for analyzing IoT devices like routers and cameras, covering techniques for extracting firmware, decrypting images, and using tools like Ghidra, Binwalk, and QEMU. Jha also shares advice on secure firmware development, emphasizing the importance of avoiding hardcoded credentials and implementing proper secure boot mechanisms.

    Embedded firmwareEDA & CAD tools
    7 chapters

  • IoT For All Podcast · 25m

    How IoT Security is Evolving | Crypto Quantique's Shahram Mossayebi

    Shahram Mossayebi, founder and CEO of Crypto Quantique, explains the evolution of IoT security, arguing that the fragmented ecosystem forces OEMs to deal with excessive complexity and cost. He advocates for 'security by design' through 'unforgeable identities' and 'root of trust' mechanisms, such as quantum tunneling, to simplify end-to-end security. Mossayei highlights recent partnerships with Microchip and Andes Technology to integrate these security layers directly into semiconductor hardware, enabling scalable and secure IoT deployments.

    Security & privacyMicrocontrollers & dev platforms
    10 chapters

  • The Pragmatic Embedded Podcast · 36m

    Embedded Cybersecurity Basics with Jacob Beningo

    Jacob Beningo, an embedded software consultant and co-founder of the Embedded Online Conference, explains how to integrate security into the embedded development lifecycle without relying on waterfall methods. He details the use of hardware-based isolation, specifically citing ARM TrustZone and Cypress/Infineon PSOC 64 microcontrollers, to establish a root of trust and secure boot processes. Beningo advocates for data-driven architecture and hardware abstraction layers to maintain agility when supply chain issues or security requirements force hardware changes, and introduces ARM's Platform Security Architecture (PSA) as a framework for threat modeling and certification.

    Security & privacyMicrocontrollers & dev platforms
    8 chapters

  • The Amp Hour · 1h 07m

    Hardware Security with Matt Brown

    Matt Brown of Brown Find Security discusses hardware security best practices and reverse engineering techniques, using his analysis of a smart charcoal smoker as a primary case study. He explains how unencrypted flash storage and lack of key rotation on an ESP32-based device allowed him to extract private keys and intercept TLS traffic. The conversation covers the importance of threat modeling, the role of secure elements like the ATECC608, and the tools used for firmware dumping and RF analysis.

    Security & privacyDebugging & failure analysis
    7 chapters

  • The Pragmatic Embedded Podcast · 48m

    Offensive Cybersecurity with Ryan Torvik

    Ryan Torvik, founder and CEO of Tulip Tree Technology, explains the offensive cybersecurity mindset and how it applies to securing embedded systems. He details techniques for extracting and analyzing firmware using tools like IDA Pro and Ghidra, and discusses the importance of designing security from the start, including using standard libraries and secure languages like Rust. Torvik also describes Tulip Tree's emulation technology, which models hardware behavior to allow developers to test firmware and detect vulnerabilities without physical hardware.

    Security & privacyEmbedded firmware
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.