Hardware Podcasts

Mission Critical Devices and Formal Methods | Kry10's Boyd Multerer | Internet of Things Podcast

IoT For All Podcast · 21 Nov 2023 · 22m · Episode 321

What this episode covers

Boyd Multerer, CEO of Kry10 and former Xbox lead, explains how lessons from game console security apply to mission-critical IoT devices, emphasizing the need for isolation and secure updates. He discusses the shift from monolithic kernels to microkernels verified by formal methods, citing the seL4 kernel and DARPA's HACMS program as proof that mathematically proven code can eliminate entire classes of attacks. Multerer warns that new regulations like the European Cyber Resilience Act are making software liability comparable to hardware liability, forcing companies to adopt zero-trust architectures and formal verification to mitigate risk.

Most relevant to

companies scaling up

Topics

Mentioned

Companies
Kry10, DARPA, Amazon
Products
Xbox, Xbox Live, XNA
Also
seL4, HACMS, Linux, European Cyber Resilience Act

Related episodes from other shows

Other shows on the same ground, closest first.

  • Coredump Sessions · 1h 03m

    #000: How New IoT Security Regulations Will Shape the Industry's Future

    François Baldassari, founder and CEO of Memfault, and co-founder/CTO Chris Coleman discuss the impact of new IoT security regulations, specifically the EU's Cyber Resilience Act (CRA) and the US FCC's Cyber Trust Mark. They argue that OTA updates, Software Bill of Materials (SBOM) tracking, and device observability are now mandatory for compliance, moving security from an afterthought to a core engineering requirement. The hosts highlight that ignoring these regulations risks severe liability, citing recent pager explosions and Shimano bike shacker hacks as examples of physical dangers from insecure connected devices.

    Security & privacyEmbedded firmware
    9 chapters

  • Coredump Sessions · 58m

    #008: Navigating the Changing IoT Security Landscape: A Survival Guide for Product Leaders

    Giovanni Alberto Falcione, CTO at Exine, joins Memfault's François Baldassari and Thomas Sarlandie to discuss the impact of the EU's Cyber Resilience Act (CRA) on IoT security. They analyze the shift from voluntary standards like NIST 800-53 to mandatory compliance, highlighting the critical need for runtime security monitoring and Software Bill of Materials (SBOM) tracking. The conversation details how eBPF technology enables low-overhead anomaly detection and how OTA updates are essential for mitigating vulnerabilities in the field.

    Security & privacyEmbedded firmware
    6 chapters

  • Embedded.fm · 1h 10m

    515: Script Boomers

    Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

    Security & privacyConnected products & IoT
    8 chapters

  • Coredump Sessions · 59m

    #009: Zephyr’s Meteoric Rise and What It Means for the Future of Embedded

    Kate Stewart, VP of Dependable Embedded Systems at the Linux Foundation, explains how Zephyr RTOS evolved from Intel’s Wind River roots into a multi-vendor open-source project with a governance model designed to prevent corporate capture. She details Zephyr’s technical differentiators, including its Linux-inspired Kconfig and device tree, the pragmatic reuse of MCUboot, and the introduction of 5-year Long-Term Support (LTS) releases to meet regulatory demands like the EU Cyber Resilience Act (CRA). The conversation covers Zephyr’s safety certification journey, its transparent CVE tracking, and its growing adoption by silicon vendors like Nordic and Arduino, as well as its expanding support for RISC-V and Rust.

    Embedded firmwareSecurity & privacy
    10 chapters

  • The Pragmatic Embedded Podcast · 36m

    Embedded Cybersecurity Basics with Jacob Beningo

    Jacob Beningo, an embedded software consultant and co-founder of the Embedded Online Conference, explains how to integrate security into the embedded development lifecycle without relying on waterfall methods. He details the use of hardware-based isolation, specifically citing ARM TrustZone and Cypress/Infineon PSOC 64 microcontrollers, to establish a root of trust and secure boot processes. Beningo advocates for data-driven architecture and hardware abstraction layers to maintain agility when supply chain issues or security requirements force hardware changes, and introduces ARM's Platform Security Architecture (PSA) as a framework for threat modeling and certification.

    Security & privacyMicrocontrollers & dev platforms
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.