Hardware Podcasts

The Importance of Global Standard for IoT Security | ioXt Alliance's Grace Burkard | Internet of Things Podcast

IoT For All Podcast · 20 Sept 2022 · 21m

What this episode covers

Grace Burkard, Director of Operations at the ioXt Alliance, explains the organization's mission to provide a global standard for IoT security through its certification program. She details the two certification paths—third-party lab testing and self-attestation—and the importance of harmonized standards to help manufacturers navigate fragmented regulatory landscapes. Burkard highlights challenges such as the lack of global standard recognition and the evolving threat landscape, emphasizing the need for continuous firmware updates and ecosystem-wide security.

Most relevant to

established companies

Topics

Mentioned

Companies
ioXt Alliance, Decra, Bishop Fox, Secure Onward Security, NCC Group, Bureau Veritas, SGS Brightsite, PSA, CSA, NIST
Tools
SECSAM
Also
Log4j

Related episodes from other shows

Other shows on the same ground, closest first.

  • Coredump Sessions · 58m

    #008: Navigating the Changing IoT Security Landscape: A Survival Guide for Product Leaders

    Giovanni Alberto Falcione, CTO at Exine, joins Memfault's François Baldassari and Thomas Sarlandie to discuss the impact of the EU's Cyber Resilience Act (CRA) on IoT security. They analyze the shift from voluntary standards like NIST 800-53 to mandatory compliance, highlighting the critical need for runtime security monitoring and Software Bill of Materials (SBOM) tracking. The conversation details how eBPF technology enables low-overhead anomaly detection and how OTA updates are essential for mitigating vulnerabilities in the field.

    Security & privacyEmbedded firmware
    6 chapters

  • Coredump Sessions · 1h 03m

    #000: How New IoT Security Regulations Will Shape the Industry's Future

    François Baldassari, founder and CEO of Memfault, and co-founder/CTO Chris Coleman discuss the impact of new IoT security regulations, specifically the EU's Cyber Resilience Act (CRA) and the US FCC's Cyber Trust Mark. They argue that OTA updates, Software Bill of Materials (SBOM) tracking, and device observability are now mandatory for compliance, moving security from an afterthought to a core engineering requirement. The hosts highlight that ignoring these regulations risks severe liability, citing recent pager explosions and Shimano bike shacker hacks as examples of physical dangers from insecure connected devices.

    Security & privacyEmbedded firmware
    9 chapters

  • Over the Air · 23m

    IoT Security & The Importance Certificates with Ellen Boehm, SVP, IoT at Keyfactor

    Ellen Boehm, SVP of IoT at Keyfactor, discusses the critical role of digital certificates and public key infrastructure (PKI) in securing IoT devices, particularly in high-stakes industries like medical and automotive. She explains how Keyfactor helps OEMs manage certificate lifecycles at scale to prevent field failures and prepare for post-quantum cryptography threats. The conversation also covers the challenges of integrating enterprise security solutions with open-source foundations and the emerging need for OT security in industrial automation.

    Security & privacyConnected products & IoT
    7 chapters

  • Manufacturing Happy Hour · 31m

    Cybersecurity Mini-Series: ICS Product Security & Standards (ISA/IEC 62443) (Ep. 4 of 4)

    Megan Samford, Product Safety and Security Director, and Shoshana Wodzisz, Global Product Security Leader, both at Rockwell Automation, discuss the specifics of IEC 62443, the global standard for industrial control system (ICS) cybersecurity. They explain why ICS security is a distinct niche within critical infrastructure, emphasizing that consequences of failure involve safety and physical integrity rather than just financial loss. The guests highlight the importance of third-party certification over self-certification and detail how Rockwell uses the standard to ensure secure product development and sourcing for asset owners.

    Security & privacyCertification & compliance
    8 chapters

  • Embedded.fm · 1h 13m

    192: Button Connected To Nothing

    Terry Dunlap, founder and CEO of Tactical Network Solutions, discusses the critical lack of security in Internet of Things (IoT) devices, citing the Mirai botnet, the TrendNet FTC lawsuit, and the St. Jude Medical defibrillator alert as key examples of failure. He explains that common vulnerabilities stem from insecure coding practices, such as buffer overflows and hardcoded keys, often exacerbated by outsourcing firmware development without source code visibility. Dunlap highlights the emergence of standards like UL 2900 and the work of organizations like CableLabs to enforce firmware evaluation, while noting that consumers often remain vulnerable due to poor router configurations and a lack of firmware update support. He advises manufacturers to implement secure coding practices, use source code auditing tools, and encrypt firmware images to reduce the attack surface before devices reach the field.

    Security & privacyEmbedded firmware
    11 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.