Open IoT & ELC 2017

IoT devices are almost certainly going to become insecure over time due to newly discovered vulnerabilities. An over-the-air (OTA) update mechanism is required to fix devices deployed in the field. When the environment in which the devices operate allows attackers to tamper with them, then it becomes important that the devices not only detect attempts to modify the OS while running, but also while the device was powered off.

Patrick Ohly is the maintainer of meta-integrity and meta-swupd, two layers which make the Linux Integrity Measurement Architecture (IMA) and the Clear Linux OS swupd update mechanism available to Linux distributions built with Yocto/OpenEmbedded. This talk will compare these two approaches against several alternatives (dm-verity, OSTree, ...) and explain how to use these layers.