Lecture

Patch at Scale: What CRA-Ready Software Updates Look Like in the Real World

  • at -
  • Hall C5C5.100
  • Language: English
  • Type: Lecture

Lecture description

"Under the Cyber Resilience Act, discovering a vulnerability is not enough. OEMs need a secure and repeatable way to remediate vulnerabilities across products already operating in the field. For embedded and IoT teams, that becomes especially challenging across heterogeneous hardware, software versions, unreliable networks, and large device fleets.

This session examines the engineering practices behind secure vulnerability remediation at scale, including identifying affected devices, signed software artifacts, phased deployments, automated rollback, update verification, and maintaining an auditable remediation history."