Next Generation Strategies for Software Security in Critical Systems and Securing the Supply Chain

No ratings

Presented at BSidesOttawa 2014 by

Daniel Thanos

There is an exponentially growing global trend in network connectivity and system complexity being driven by IoT, mobility, wireless networks, and Internet clouds. IP communication networks, web based software and APIs, and embedded systems of various types are converging and fundamentally building the software defined world where everything is addressable and programmatic, including in critical systems. How devices and software are built are based on globally distributed supply chains with varying degrees of security in the engineering and development process. This is true in both the open source and commercial world. Network security perimeters are increasingly ineffective against this new world and the only way to secure the “network” is by ensuring the devices, software, and services that compose it are themselves secure built from software that is trustworthy and resilient against attack. In this presentation we will explore both technology and business strategies that can create the right market incentives as well as provide paradigm changing approaches to begin to secure our most critical systems.