Creating a Secure IoT Platform Using Common Linux Distributions

Explore the potential of creating a secure IoT platform using a common Linux distribution in this 24-minute conference talk by Peter Robinson from Red Hat. Discover how to enhance Fedora to serve as a secure and stable foundation for IoT devices and gateways. Learn about crucial security measures, including secure boot processes, dependency minimization, and the implementation of SELinux and seccomp technologies. Gain insights into scaling IoT solutions to manage hundreds of thousands of gateways and implementing centralized upgrade processes. Understand the vision for a modular Linux IoT platform based on open-source technologies, incorporating OSTree and Atomic for smooth upgrades and rollbacks. Explore the roadmap towards a secure IoT future across multiple platforms and architectures, addressing device and policy management challenges in large-scale deployments.

Intro
Overview The Internet of things will change the world, but how do we maintain it? A Linux distribution like Fedora is a great base to define a new generation of lot but we need to balance: • Maintenance and updates
Base Platform
Security . Secure boot process • UEFI Secure boot, OP-TEE and friends . Dependency minimisation . SELinux, seccomp and related technologies • Toolchain security functionality
Evolve the Gateway • Scale to 100s of thousands of gateways? • Centralised upgrade process
Summary
Questions?