Hardware Podcasts

Using Physical Layer 1 for Ultimate Data Visibility | Sepio's Yossi Appleboum

IoT For All Podcast · 18 Aug 2022 · 22m

What this episode covers

Yossi Appleboum, CEO and Co-Founder of Sepio, explains how his company uses physical layer 1 (Layer 1) data to provide visibility into IoT and OT devices for enterprise security. He details how unique hardware fingerprints allow organizations to identify assets regardless of their network activity or encryption status, addressing the common misconception that endpoint security tools provide complete asset visibility. Appleboum advises companies to prioritize understanding their asset inventory before attempting complex mitigation strategies, warning against ignoring basic threats like USB devices in favor of modern security programs.

Most relevant to

companies scaling up

Topics

Mentioned

Companies
Sepio, Cisco, CIA, CIS
Products
Raspberry Pi
Also
Yossi Appleboum, Ryan Chacon

Related episodes from other shows

Other shows on the same ground, closest first.

  • Manufacturing Happy Hour · 43m

    255: How AI is Reshaping Security and OT Network Requirements featuring Felipe Sabino Costa, Sr. Product Manager for Networking & Cybersecurity at Moxa

    Felipe Sabino Costa, Sr. Product Manager for Networking & Cybersecurity at Moxa, explains how the shift from historical logging to real-time predictive analytics in Operational Technology (OT) is straining legacy infrastructure. He highlights that 80-85% of global industry lacks basic defense at the edge, as old systems were not designed for the high bandwidth demands of AI-driven applications like intelligent transportation and semiconductor manufacturing. Costa discusses how AI enables attackers to craft sophisticated, adaptive phishing and port-scanning attacks, necessitating a move beyond simple air-gapping to layered security frameworks like NIST and IEC 62443. He uses a 'nutrition label' analogy for IEC 62443 to explain how certifications help manufacturers verify product security features and choose the right partners for resilient network design.

    Security & privacyAI & machine learning
    7 chapters

  • The Amp Hour · 1h 06m

    An Interview with Joe FitzPatrick

    Joe Fitzpatrick of SecurityHardware.com, a former CPU silicon security tester, explains how hardware vulnerabilities arise from Verilog assumptions and undocumented register behaviors, leading to his current focus on hardware security training. He details the evolution of attacks from simple JTAG access to sophisticated USB-C exploits involving microcontrollers in adapters, and discusses the NSA Playset's Slot Screamer device. Fitzpatrick argues that physical access often bypasses software security, highlighting the risks of unverified hardware like YubiKey clones and the ethical dilemmas of vulnerability disclosure in IoT and medical devices.

    Security & privacyEmbedded firmware
    8 chapters

  • EE Times Current · 36m

    IoT Security is only as good as its weakest link

    Nitin Dahad hosts an episode on IoT security featuring John Moore of the IoT Security Foundation, who emphasizes that security is a process requiring resilience and vulnerability disclosure policies rather than a static certification. Sharon Hagi, Chief Security Officer at Silicon Labs, explains the 'silicon to cloud' ecosystem approach, arguing that security is only as strong as its weakest link across the entire device, network, and cloud stack. Emmanuel Sambuy of Silicon Labs details specific security implementations for medical devices, including the Series 2 Bluetooth Low Energy (BLE) portfolio, Secure Vault technology, and compliance with Diabetes Technology Society (DTSec) standards.

    Security & privacyConnected products & IoT
    5 chapters

  • Embedded.fm · 1h 10m

    515: Script Boomers

    Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

    Security & privacyConnected products & IoT
    8 chapters

  • Product Startup · 15m

    225: Communication Silos for Product Design Stakeholders

    John Conafay, founder of Integrate, explains how compartmentalized communication tools solve the 'source of truth' problem in hardware development. Drawing from his background with aerospace startups and the US Air Force, he argues that siloing information protects intellectual property and reduces administrative overhead compared to disjointed toolchains like spreadsheets and email. He details how object-level permissions allow startups to scale from garage prototypes to enterprise manufacturing without losing data integrity or security.

    Connected products & IoTLeadership, teams & culture
    6 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.