# Offensive Cybersecurity with Ryan Torvik

- Show: [The Pragmatic Embedded Podcast](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast)
- Published: 2025-04-09
- Length: 48m
- Page: https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik
- Listen: https://agileembeddedpodcast.com/episodes/offensive-cybersecurity-with-ryan-torvik-P9BWGLcN

## Summary

Ryan Torvik, founder and CEO of Tulip Tree Technology, explains the offensive cybersecurity mindset and how it applies to securing embedded systems. He details techniques for extracting and analyzing firmware using tools like IDA Pro and Ghidra, and discusses the importance of designing security from the start, including using standard libraries and secure languages like Rust. Torvik also describes Tulip Tree's emulation technology, which models hardware behavior to allow developers to test firmware and detect vulnerabilities without physical hardware.

## Chapters

- [0:37](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=37) Introduction: Ryan Torvik and Tulip Tree Technology
- [1:07](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=67) Offensive Cybersecurity Mindset and Vulnerability Research
- [5:05](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=305) Attacking Embedded Systems: Attack Surface Analysis and Firmware Extraction
- [9:34](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=574) Firmware Analysis Tools: IDA Pro, Binary Ninja, and Ghidra
- [13:02](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=782) Defensive Security: Parsers, Cryptography, and OTA Updates
- [19:59](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=1199) Security for Small Companies and the Gap in Developer Tools
- [25:47](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=1547) Secure Programming Languages: Rust and Memory Safety
- [33:10](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=1990) ASLR, Return-Oriented Programming, and Hardware Protections
- [35:57](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=2157) Tulip Tree's Emulation Technology and Hardware Modeling
- [44:22](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik#t=2662) Learning Resources: CTFs, Microcorruption, and Education

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [PCB design & layout](https://hardwarepodcasts.com/topic/pcb-design)
- [Microcontrollers & dev platforms](https://hardwarepodcasts.com/topic/microcontrollers-and-platforms)
- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)

## Most relevant to

early-stage companies

## Mentioned

- Tulip Tree Technology (company)
- IDA Pro (tool)
- Binary Ninja (tool)
- Ghidra (tool)
- Microcorruption (product)
- National Vulnerability Database (other)
- Rust (other)
- QEMU (tool)

## Related episodes from other shows

- [042 - Diwali in the Morning](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2020-11-24-042-diwali-in-the-morning) (Unnamed Reverse Engineering Podcast)
- [256: Agglomeration](https://hardwarepodcasts.com/podcast/embedded-fm/2018-08-16-256-agglomeration) (Embedded.fm)
- [342: That Girl's Brain](https://hardwarepodcasts.com/podcast/embedded-fm/2020-08-27-342-that-girls-brain) (Embedded.fm)
- [How to Discover & Handle IoT Firmware Vulnerabilities | Terry Dunlap, Co-Founder & CEO, ReFirm Labs | #IoTFounders E027](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-05-15-how-to-discover-handle-iot-firmware-vulnerabilities-terry-dunlap-co-founder-ceo) (IoT For All Podcast)
- [Biggest Firmware Vulnerabilities & How to Fix Them | NetRise's Thomas Pace | Internet of Things Podcast](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2023-01-26-biggest-firmware-vulnerabilities-how-to-fix-them-netrises-thomas-pace-internet-o) (IoT For All Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to The Pragmatic Embedded Podcast.