Lecture
Patch at Scale: What CRA-Ready Software Updates Look Like in the Real World
- at -
- Hall C5C5.100
- Language: English
- Type: Lecture
Lecture description
"Under the Cyber Resilience Act, discovering a vulnerability is not enough. OEMs need a secure and repeatable way to remediate vulnerabilities across products already operating in the field. For embedded and IoT teams, that becomes especially challenging across heterogeneous hardware, software versions, unreliable networks, and large device fleets.
This session examines the engineering practices behind secure vulnerability remediation at scale, including identifying affected devices, signed software artifacts, phased deployments, automated rollback, update verification, and maintaining an auditable remediation history."
This session examines the engineering practices behind secure vulnerability remediation at scale, including identifying affected devices, signed software artifacts, phased deployments, automated rollback, update verification, and maintaining an auditable remediation history."