Vortrag
Security Doesn't End at Launch: Engineering Connected Devices for Their Entire Lifetime
- von -
- Halle C6C6.501
- Sprache: Englisch
- Vortragstyp: Vortrag
Vortragsbeschreibung
Shipping an IoT device is no longer the end of product development - it is the beginning of a security lifecycle that may last 10 years or more. While secure boot, encrypted communication, and over-the-air firmware updates have become standard, many embedded teams still struggle with an equally important challenge: continuously identifying newly discovered vulnerabilities, understanding which deployed devices are affected, and delivering security updates efficiently across large fleets. This presentation introduces a practical engineering approach to post-deployment security management. Attendees will learn how Software Bills of Materials (SBOMs), continuous vulnerability monitoring (CVE identification), fleet-wide exposure analysis, and secure OTA updates can be combined into an end-to-end workflow for maintaining connected products throughout their operational lifetime. Rather than focusing on theory or compliance alone, the session demonstrates how engineering organizations can build scalable processes that reduce maintenance effort, improve product security, and simplify long-term device management. Real-world examples illustrate how modern cloud services enable continuous visibility into deployed software components, prioritize remediation efforts based on fleet exposure, and provide evidence that vulnerabilities have been addressed. The same engineering practices also help manufacturers prepare for emerging cybersecurity regulations such as the EU Cyber Resilience Act, while delivering tangible operational benefits regardless of regulatory requirements.
