Open IoT & ELC 2017

Despite the myriad technologies available for the task, securing Linux systems (embedded or otherwise) is not much easier today than it was 10 years ago. Where many security talks at ELC have given surveys of the various components, and architectures for securing embedded Linux systems this talk is a deep dive into enabling and using the new trusted platform module 2.0 (TPM2) to achieve specific security goals.

This talk will have 3 major thrusts: Firstly we will discuss a threat model that describes the security goals we wish to achieve as well as the threats to these goals that we're able to mitigate with the TPM. Second, we describe the Intel TPM2 software stack (TSS) and the various possible configurations appropriate for Linux systems from embedded up to servers. Finally we discuss implementations of our mitigations using the meta-measured Open Embedded layer.