Hardware Podcasts

Embedded Cybersecurity Basics with Jacob Beningo

The Pragmatic Embedded Podcast · 2 Feb 2022 · 36m

What this episode covers

Jacob Beningo, an embedded software consultant and co-founder of the Embedded Online Conference, explains how to integrate security into the embedded development lifecycle without relying on waterfall methods. He details the use of hardware-based isolation, specifically citing ARM TrustZone and Cypress/Infineon PSOC 64 microcontrollers, to establish a root of trust and secure boot processes. Beningo advocates for data-driven architecture and hardware abstraction layers to maintain agility when supply chain issues or security requirements force hardware changes, and introduces ARM's Platform Security Architecture (PSA) as a framework for threat modeling and certification.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Cypress, Infineon, Microchip, STMicroelectronics, NXP, Amazon Web Services, Azure, Siemens
Chips
PSOC 64, ARM TrustZone
Also
Jacob Beningo, Embedded Online Conference, IoT Online Conference, Trusted Firmware-M, Platform Security Architecture, Patterns in the Machine, Reusable Firmware Development

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 10m

    515: Script Boomers

    Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

    Security & privacyConnected products & IoT
    8 chapters

  • Embedded.fm · 59m

    258: Security Is Another Dimension

    Axel Poschmann, head of the hardware security lab at DarkMatter, discusses embedded security as a trade-off against usability and cost, emphasizing that perfect security is impossible. He outlines a practical workflow for securing IoT devices, including threat modeling, using constant-time crypto libraries, and leveraging low-cost third-party testing or university collaborations when budgets are tight. Poschmann also explains how hardware countermeasures like fuses and physical obfuscation raise the barrier for attackers, referencing standards like Common Criteria and resources such as Christof Paar’s cryptography lectures and ENISA’s guidelines.

    Security & privacyPCB design & layout
    9 chapters

  • Embedded.fm · 56m

    256: Agglomeration

    Chris White and Elecia White discuss the ST Micro F1 series, comparing the use of HAL, Cube, and bare metal programming for embedded systems. They review the Hippocratic Oath for Connected Medical Devices from IAmTheCalvary.org and Make Magazine's tips for securing DIY IoT projects. The hosts also explore the Rockstar Programming Language specification, C++ expressiveness, and Elecia's recent work with Python and JSON.

    Microcontrollers & dev platformsSecurity & privacy
    7 chapters

  • Unnamed Reverse Engineering Podcast · 55m

    042 - Diwali in the Morning

    Asmita Jha, an IoT security consultant at Payatu, discusses her transition from embedded firmware development to hardware security and reverse engineering. She details her workflow for analyzing IoT devices like routers and cameras, covering techniques for extracting firmware, decrypting images, and using tools like Ghidra, Binwalk, and QEMU. Jha also shares advice on secure firmware development, emphasizing the importance of avoiding hardcoded credentials and implementing proper secure boot mechanisms.

    Embedded firmwareEDA & CAD tools
    7 chapters

  • IoT For All Podcast · 25m

    How IoT Security is Evolving | Crypto Quantique's Shahram Mossayebi

    Shahram Mossayebi, founder and CEO of Crypto Quantique, explains the evolution of IoT security, arguing that the fragmented ecosystem forces OEMs to deal with excessive complexity and cost. He advocates for 'security by design' through 'unforgeable identities' and 'root of trust' mechanisms, such as quantum tunneling, to simplify end-to-end security. Mossayei highlights recent partnerships with Microchip and Andes Technology to integrate these security layers directly into semiconductor hardware, enabling scalable and secure IoT deployments.

    Security & privacyMicrocontrollers & dev platforms
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Pragmatic Embedded Podcast. The episode itself belongs to its publisher.