Hardware Podcasts

PKI and IoT Device Security in 2021 | Keyfactor's Ellen Boehm

IoT For All Podcast · 12 Jan 2021 · 27m

What this episode covers

Ellen Boehm, Senior Director of IoT Product Management at KeyFactor, discusses the evolution of IoT device security and the critical role of Public Key Infrastructure (PKI). She explains how asymmetric cryptography and unique digital identities protect devices from tampering and counterfeiting, particularly in manufacturing and supply chain contexts. Boehm highlights the shift toward edge computing and AI, emphasizing that trust must be established before any data processing occurs. She advises manufacturers to implement code signing, secure boot, and long-term certificate management strategies to comply with emerging regulations in medical, automotive, and industrial sectors.

Most relevant to

large enterprises

Topics

Mentioned

Companies
KeyFactor
Products
KeyFactor Control Platform
Chips
TPM
Also
FDA, IEC 62443

Related episodes from other shows

Other shows on the same ground, closest first.

  • Over the Air · 23m

    IoT Security & The Importance Certificates with Ellen Boehm, SVP, IoT at Keyfactor

    Ellen Boehm, SVP of IoT at Keyfactor, discusses the critical role of digital certificates and public key infrastructure (PKI) in securing IoT devices, particularly in high-stakes industries like medical and automotive. She explains how Keyfactor helps OEMs manage certificate lifecycles at scale to prevent field failures and prepare for post-quantum cryptography threats. The conversation also covers the challenges of integrating enterprise security solutions with open-source foundations and the emerging need for OT security in industrial automation.

    Security & privacyConnected products & IoT
    7 chapters

  • Embedded.fm · 1h 10m

    515: Script Boomers

    Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

    Security & privacyConnected products & IoT
    8 chapters

  • Coredump Sessions · 1h 03m

    #000: How New IoT Security Regulations Will Shape the Industry's Future

    François Baldassari, founder and CEO of Memfault, and co-founder/CTO Chris Coleman discuss the impact of new IoT security regulations, specifically the EU's Cyber Resilience Act (CRA) and the US FCC's Cyber Trust Mark. They argue that OTA updates, Software Bill of Materials (SBOM) tracking, and device observability are now mandatory for compliance, moving security from an afterthought to a core engineering requirement. The hosts highlight that ignoring these regulations risks severe liability, citing recent pager explosions and Shimano bike shacker hacks as examples of physical dangers from insecure connected devices.

    Security & privacyEmbedded firmware
    9 chapters

  • The Manufacturing Executive · 29m

    Cyber Security in Manufacturing w/ Jason Ray

    Jason Ray, Co-Founder and CEO of Paperless Parts, discusses the critical importance of cybersecurity in the manufacturing sector, particularly for companies serving the defense industrial base. He explains the evolution from ITAR self-certification to the rigorous CMMC compliance framework, detailing how digital transformation has blurred data boundaries and increased risk. Ray outlines a five-step checklist for shops to prepare for CMMC audits and highlights how secure data handling has become a competitive selling tool for OEMs.

    Security & privacyCertification & compliance
    6 chapters

  • Embedded.fm · 1h 02m

    451: From Concept to Launch

    Elecia White, founder of Logical Elegance, and panelists Phillip Johnston of Embedded Artistry and Tyler Hoffman of Memfault discuss the software tasks often overlooked during the transition from concept to manufacturing launch. They emphasize the necessity of robust bootloaders, OTA update mechanisms, and dedicated manufacturing firmware that operates offline. The group highlights specific failures such as bricked inventory due to faulty OTA, network congestion in factories, and the high cost of testing security features like self-bricking. They also cover the importance of per-device key management, deterministic testing environments, and integrating manufacturing validation into CI pipelines.

    Embedded firmwareSecurity & privacy
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.