IoTSF Smart Buildings Cyber Security Workshop
2020-01-20 12:00 - 16:30 (Europe/London) | The Caledonian Club, 9 Halkin Street, Belgravia, London, SW1X 7DR, United Kingdom
Free Smart Buildings and Enterprise IoT Security Workshop by IoT Security Foundation Working Group
We would like to invite you to join us on Monday 20th January 2020 at the IoT Security Foundation’s Workshop on the challenges of IoT Security for Smart Buildings. The main focus of our discussions will be to agree an outline of content for a new Guideline which includes the perspectives of the key Smart Buildings’ Security stakeholders.
There are many stakeholders who have a need, and interest, in fit for purpose security in this area – from solution providers to occupiers. Hence the issues are likely widespread and multi-faceted.
In short, the increasing number of exposed IoT vulnerabilities suggest that something needs to be done to respond to the growing threats that accompany the adoption of connected (“IoT”) technologies in buildings. We assert that the best way to address the many issues is collaboratively, with key stakeholders. Hence the starting objective we’ve set for the group, is ‘to understand, specify, procure, install/integrate, validate, operate and maintain IoT systems securely in buildings throughout the working life’.
But we’d like to hear what you think – what is your perspective?
1. What problems in the Smart Buildings’ cyber security space have you experienced or know of?
2. Which are the most urgent problems you think need to be addressed? For example, because the impact and risk are both high.
3. What is your view on the different needs, roles, and responsibilities of the Smart Building eco-system and other stakeholders? – such as:

Technology providers and integrators: how should they provision fit for purpose security over the intended life cycle? What assurances should they provide?
Demand-side users: operators and occupiers. What is required for successful deployment and maintenance?
Government, policy makers and regulators: Is there a need for basic regulation?

Further questions we would like to consider as a group.

Is there enough awareness and advice for keeping smart buildings safe across different stakeholders?
What are the relevant standards and best practices that are currently used in the design, implementation, procurement, operation/maintenance of smart building systems? How well do they achieve their goals? Is anything missing or that could be improved?

Finally, in the light of these questions, and to get the most out of the workshop please consider this question: What are the top 3 challenges you think the group should begin to address and where you have an interest to help solve?
Please take a little time to prepare so we can get the best out of the available time.
Monday 20th January 2020 12:00-16:30
Registration & Lunch: 12:00-13:00; Workshop 13:00-16:30
Free to attend
We look forward to meeting you and working with you.
Sarb Sembhi and James Willison, IoT Security Foundation Smart Buildings Leaders
Register Now

IoTSF Member Plenary 26
2020-02-13 12:30 - 17:00 | The Caledonian Club, 9 Halkin Street, Belgravia, London, SW1X 7DR, United Kingdom
Join us on 13th February for an exciting day of IoTSF project talks and industry guest speakers covering key developments in IoT Security.
You are invited to join us on Thursday 13th February 2020 for the 26th IoT Security Foundation Plenary Session.
This plenary session follows the progress of the IoTSF Working Group Projects which include the IoTSF Compliance Framework, Secure Design Best Practice Guides and Smart Buildings groups. This plenary also features wider IoTSF operations and partnership updates as well as industry guest speakers.
This event is for the IoTSF members and is also open to non-members.
Not sure if your company is a member? Check Here
If you are not a member and would like to attend, or you have any queries please email IoTSF Community Manager Jenny Devoy
REGISTER NOW

IoTSF Supply Chain Integrity Project Meeting
2020-05-12 09:30 - 13:00 | Virtual Meeting
The IoT Security Foundation (IoTSF) is hosting its second Supply Chain Integrity Project meeting on Tuesday 12th May 09:30-13:00 BST. This virtual meeting will gather various supply chain stakeholders to discuss and establish the known security challenges within smart supply chains and analyse the priorities of this project.
Supply chains are increasingly recognised as a major vector for cyber-attacks. Highly notorious examples include Stuxnet and NotPetya. National security agencies including NIST (US), ENISA (EU), NCSC (UK) have begun developing recommendations for generic IT systems, but to date no organisation has released guidelines specifically developed for IoT. Supply chain security is also a real and present problem for device OEMs, who suffer billion in lost revenues through numerous abuses of their intellectual property, including counterfeiting, overproduction and IP theft.
Technologies and services to mitigate these problems exist, but the IoT industry is unable to evaluate them confidently.
The Supply Chain Integrity Project’s mission is to help IoT operators manage cyber risks to which they are exposed through their suppliers. By addressing the problem of delivering devices into deployments in a trustworthy initial state and maintaining their trustworthiness throughout their operational lifespans it supports the IoT Security Foundation’s mission to “Make it safe to connect”, and complements preceding work on securing deployed devices.
The project will gather information on IoT supply chains in order to build a representative model, security analysis of which will lead to a set of prioritised recommendations accessible to a wide audience beyond the security community. Participants will gain opportunities to show leadership through their contributions to the industry, and to gain a lead in their own product development.
This meeting is open to IoTSF members and non-members working within the smart supply chain, to register your place, email Angela Tansey
If you have any queries about this project, email contact@iotsecurityfoundation.org

IoTSF Supply Chain Integrity Project Meeting
2020-06-09 15:00 - 17:00 | Virtual Event
The IoT Security Foundation (IoTSF) is hosting its third Supply Chain Integrity Project meeting on Tuesday 9th June 15:00-17:00 BST.
This virtual meeting will gather various supply chain stakeholders to discuss and establish the known security challenges within smart supply chains and analyse the priorities of this project.
Supply chains are increasingly recognised as a major vector for cyber-attacks. Highly notorious examples include Stuxnet and NotPetya. National security agencies including NIST (US), ENISA (EU), NCSC (UK) have begun developing recommendations for generic IT systems, but to date no organisation has released guidelines specifically developed for IoT. Supply chain security is also a real and present problem for device OEMs, who suffer billion in lost revenues through numerous abuses of their intellectual property, including counterfeiting, overproduction and IP theft.
Technologies and services to mitigate these problems exist, but the IoT industry is unable to evaluate them confidently. The Supply Chain Integrity Project’s mission is to help IoT operators manage cyber risks to which they are exposed through their suppliers. By addressing the problem of delivering devices into deployments in a trustworthy initial state and maintaining their trustworthiness throughout their operational lifespans it supports the IoT Security Foundation’s mission to “Make it safe to connect”, and complements preceding work on securing deployed devices.
The project will gather information on IoT supply chains in order to build a representative model, security analysis of which will lead to a set of prioritised recommendations accessible to a wide audience beyond the security community. Participants will gain opportunities to show leadership through their contributions to the industry, and to gain a lead in their own product development.
This meeting is open to IoTSF members and non-members working within the smart supply chain. If you have any queries about this project, email contact@iotsecurityfoundation.org
To secure your place please click here

The 27th IoT Security Foundation Plenary
2020-07-08 15:00 - 17:30 | Virtual Event
You are invited to join us on Wednesday 8th July 2020, 15:00 – 17:30, for the 27th IoT Security Foundation Plenary Session.
This virtual plenary session follows the progress of the IoTSF Working Group Projects which include the IoTSF Compliance Framework, Secure Design Best Practice Guides, Smart Buildings & Supply Chain Integrity groups. This plenary also features wider IoTSF operations and partnership updates as well as industry guest speakers. This event is for IoTSF members and is open to invited non-members.
Not sure if your company is a member? Check here: https://iotsecurityfoundation.org/our-members
Find out more about IoTSF here: https://iotsecurityfoundation.org
If you are not a member and would like to attend, or you have any queries please email IoTSF Community Manager, Jenny Devoy
SECURE YOUR PLACE

Webinar : Eliminate Universal Default Passwords / August
2020-08-26 | Webinar
Register NowUniversal passwords weaken IoT security: if one device is compromised, all devices with that password are also compromised. New standards and upcoming regulatory change mean organisations need to assess how their IoT products use passwords and ensure universal default passwords are eliminated.
Webinars will run for approx. 2 hours.

HKT
BST/GMT
EDT/EST
UTC

26th August
13:00
06:00
01:00
05:00

29th September
18:00
11:00
06:00
10:00

27th October
01:00*
17:00
13:00
17:00

* 28th October

Webinar : Keeping Software Updated / August
2020-08-28 | Webinar
Register NowSecurity software updates are vital because every IoT product is susceptible to vulnerabilities. If updates cannot be provisioned, the security of the product will diminish over time. New standards and upcoming regulatory change mean organisations need to provide transparency on how long their products are supported with security software updates or by other suitable means.
Webinars run for approx. 2 hours.

HKT
BST/GMT
EDT/EST
UTC

28th August
13:00
06:00
01:00
05:00

1st October
18:00
11:00
06:00
10:00

30th October
01:00*
17:00
13:00
17:00

* 31st October

Webinar : Manage Vulnerability Reports / September
2020-09-01 | Webinar
Register NowWithout mechanisms to report, manage and resolve vulnerabilities, the security of consumer IoT products will diminish over time – and the likelihood of attack or abuse will increase. New standards and regulatory change mean organisations need to prepare to receive and manage vulnerability reports and follow coordinated vulnerability disclosure best practices.
Webinars will run for appox. 2 hours.

HKT
BST/GMT
EDT/EST
UTC

1st September
13:00
06:00
01:00
05:00

5th October
18:00
11:00
06:00
10:00

2nd November
02:00*
18:00
13:00
18:00

* 3rd November

IoT Thames Valley Virtual Meetup
2020-09-16 19:00 - 21:00 | Virtual Event
A detailed look at IoT attack vectors in the home
Nick Allott, CEO of nquiringminds will be giving a talk: “A detailed look at IoT attack vectors in the home” at the IoT Thames Valley Virtual Meetup on 16th September.
Nick’s presentation will be based upon work undertaken with the University of Oxford as part of the Innovate UK supported ManySecured Collaborative Intelligent Gateway project.
You can REGISTER (free to attend) for the Virtual Meetup and Nick’s talk here:
https://zoom.us/meeting/register/tJMtc-uoqT4vG9OgL0WRlgQEarO-qEoCQQ0q
Precis of Nick’s talk:
Domestic IoT architectures are deceptively complex. NQM and University of Oxford have been working on a detailed architectural analysis of IoT deployment architectures. The emergent taxonomy has proven useful in better understanding the nature of the threat and the mitigations (and innovation) needed to better protect ourselves.
This talk with go through this architecture in detail, highlighting some of the practical steps we can talk to improve the IoT security state of the art.

The 28th IoT Security Foundation Plenary
2020-09-22 15:00 - 17:30 | Virtual Event
You are invited to join us on Tuesday 22nd September 2020, 15:00 – 17:30, for the 28th IoT Security Foundation Plenary Session.
This virtual plenary session follows the progress of the IoTSF Working Group Projects which include the IoTSF Compliance Framework, Secure Design Best Practice Guides, Smart Buildings & Supply Chain Integrity groups. This plenary also features wider IoTSF operations and partnership updates as well as industry guest speakers. This event is for IoTSF members and is open to invited non-members.
Not sure if your company is a member? Check here: https://iotsecurityfoundation.org/our-members
Find out more about IoTSF here: https://iotsecurityfoundation.org
If you are not a member and would like to attend, or you have any queries please email IoTSF Community Manager, Jenny Devoy
SECURE YOUR PLACE

Hardwear.io Security Trainings and Conference Netherlands 2020
2020-09-27 08:00 - 2020-10-02 20:00 | Reading
Are you someone who is into embedded and hardware security? There are some amazing live hands-on trainings and conference talks offered by Hardwear.io this year – all online!
Hardwear.io Security Conference & Trainings is a platform for the hardware and security community, where researchers showcase and discuss their innovative research on attacking and defending hardware.
Training: 27th to 30th September; 9.00 AM – 2.00 PM CEST
Conference: 1st to 2nd October; 6.00 PM – 9.00 PM CEST
Registration: https://hardwear.io/netherlands-2020/online-training.php
Conference Talks:

Taming Hydrofluoric Acid to Extract Firmware by John McMaster
JackHammer: Rowhammer and Cache Attacks on Heterogeneous FPGA-CPU Platforms by Daniel Moghimi, Thore Tiemann, Zane Weissman
Practical reverse engineering of ECC-based authentication device with zero knowledge by Dr. Sergei Skorobogatov
Reversing & Emulating Samsung’s Shannon Baseband by Grant Hernandez & Marius Muench
CANanalyze: a python framework for automotive protocols by Erwan Le Disez & Etienne Charron
Toasting MCUs: A Firmware Extraction by EMFI by Karim M. Abdellatif & Olivier Hériveaux
Things not to do when using an IOMMU by Ilja van Sprundel & Joseph Tartaro
BadVibes – Sound Recovery using Bulb’s Vibrations by Boris Zadov & Yaron Pirutin
Looking at Silicon by Ken Shirriff
Under the hood of a CPU: Reverse Engineering the P6 microcode by Peter Bosch

Hardware Security Trainings:

Connected car hacking by Guillaume Heilles & Maxime Rossi Bellom
Hunting UEFI firmware implants by Alex Matrosov(postponed to 2-5 Nov)
TEEPwn: breaking TEEs by experience by Cristofaro Mune
RF hacking with software-defined radio by Sébastien Dudek
BootPwn – pwning secure boot by experience by Niek Timmers
Machine learning and SCA: an advanced tutorial by Stjepan Picek
Advanced microcontrollers firmware exploitation by Alexander Bolshev
Embedded physical attacks 101 by Lejla Batina, Kostas Papagiannopoulos, Leo Weissbart & Niels Samwel

Webinar : Eliminate Universal Default Passwords / September
2020-09-29 | Webinar

Webinar : Keeping Software Updated / 1st October
2020-10-01 | Webinar

Webinar : Manage Vulnerability Reports / October
2020-10-05 | Webinar

Informa IoT Security Summit Virtual Conference
2020-10-06 - 2020-10-09 | Reading
With the impact of COVID-19, cybersecurity risks have been heightened in the sudden turn of unexpected events. IoT Security Summit Virtual will help you ensure your security is robust against disruption, measuring your IoT progress with the right security framework.
Learn from security experts on how to keep your community secure by improving the safety and reliability of your security processes. Our dedicated content will cover how you can better protect your data and devices with emerging IoT technologies that will revolutionize security across data, devices, edge and network security. It’s important now, more than ever, to ensure your organization can react effectively to security threats while adapting to the new normal.
For more information visit: IoT Security Summint Virtual Conference

Webinar : Eliminate Universal Default Passwords / October
2020-10-27 | Webinar

Webinar : Keeping Software Updated / 30th October
2020-10-30 | Webinar

Webinar : Manage Vulnerability Reports / November
2020-11-02 | Webinar

IoTSF Virtual Conference 2020
2020-12-01 - 2020-12-04 | Reading
The 6th Annual Internet of Things Security Foundation Conference is a four-day virtual event that takes place between Tuesday 1st and Friday 4th December 2020. The Annual IoTSF Conference has built a loyal global following from the IoT stakeholder communities and is renowned for delivering high quality conference programmes.
The era of IoT describes the world as it transforms to be ever-digital and increasingly connected. Along with the power of digital comes the reciprocal cyber threat, and we continue to witness an increasing number of attacks enabled by products that lack protection against well-known exploits, have been badly configured or suffer from poor maintenance. This causes businesses to be hesitant, concerns governments, increases the likelihood of regulation and ultimately frustrates markets.

Vendors must build secure, purchasers must buy secure, and users must be secure: to be without security in a digital world is not an option. Society and industry need to fight back as no one should design, buy, or use a connected product, service or system that lacks fit-for-purpose security. Yet there are no ‘one-size fits all’ security solutions – they are dependent on the application. Most of the attacks we see today can be effectively defended against, many by relatively simple measures. Organisations need to be informed, the solutions presented, choices made, and those choices need to be in keeping with their business context.
Welcome to the 2020 IoT Security Foundation Virtual Conference where we aim to illuminate and educate delegates with an update on the threat landscape, standards & regulation, best practice, next-practice and the latest developments in IoT cyber security. The IoTSF Conference features talks by leading cyber security experts, training workshops and track sessions for executives, developers, engineers, managers and security professionals.
The conference will have a senior and expert level line up of speakers which are announced as part of the promotional activity and can be found on the dedicated conference website: https://iotsfconference.com

As the World’s Longest Running IoT Security Conference, this event attracts a wide range of decision makers, including CEO’s, CSO’s, CTO’s, Chief Security Strategists, Directors, Engineers, Software and Hardware developers, Development Managers, Technical Directors, Security Experts, Academics, Government and Press.
Secure Your Place

Hardwear.io Security Training Berlin 2021
2021-01-27 09:00 - 2021-01-30 14:00 | Webinar
Are you interested in reverse engineering, side channel analysis, fault injection attacks, whitebox crypto, or just hardware security in general? Hardwear.io offers some amazing hands-on live training in January 2021 – all online!
Join one of the upcoming Hardware Security Trainings:
• Assessing and Exploiting Control Systems & IIoT by Justin Searle
• Breaking Practical White-Box Crypto by Guillaume Vinet
• EMFI and Voltage Fault injection attacks with Raiden by Adam Laurie & Grzegorz Wypych
• Advanced Microcontrollers Firmware Exploitation by Alexander Bolshev and Tao Sauvage
CLICK HERE TO SECURE YOUR TICKET
Visit the website – https://hardwear.io/berlin-2021/online-training

IoTSF Promoted Event: How Far Can We Trust The Internet of Things?
2021-02-25 10:00 - 11:30 | Virtual Event
Are currently deployed IoT solutions futureproof? Will we ever be able to make them truly secure? And what are the implications for smart cities and other connected applications? ​
Led by the SYNERGIA consortium with an opening talk by John Moor of the IoT Security Foundation, this event looks to bring together businesses to discuss how we can address the potential security risks that leave current IoT devices vulnerable as the world becomes increasingly more connected.
SYNERGIA is a consortium dedicated to the development of a secure-by-design IoT platform for large scale networks of low-power, resource-constrained devices.​ ​
Click Here to find out more and register

IoTSF Virtual Plenary
2021-03-10 14:00 - 16:30 | Virtual Event
Join us on 10th March to hear about IoTSF’s projects & industry guest speakers covering key developments in IoT Security
REGISTER HERE
About this Event
You are invited to join us on Wednesday 10th March for the 29th IoT Security Foundation Plenary Session.
This virtual plenary session follows the progress of the IoTSF Working Group Projects which include the IoTSF Compliance Framework, Secure Design Best Practice Guides, Smart Buildings & Supply Chain Integrity groups. This plenary also features wider IoTSF operations and partnership updates as well as industry guest speakers. This event is for IoTSF members and is open to invited non-members.
Not sure if your company is a member? Check here: https://iotsecurityfoundation.org/our-members
Find out more about IoTSF here: https://iotsecurityfoundation.org
If you are not a member and would like to attend, or you have any queries please email IoTSF Community Manager, Jenny Devoy.

IoTSF Promoted Event: Secure Edge Computing with Amazon Web Services IoT and MULTOS
2021-03-24 15:00 - 15:45 | Virtual Event
About This Webinar
Join Amazon Web Services and MULTOS to learn about the benefits of using AWS IoT Greengrass for managing edge computing tasks and how the MULTOS Trust Core can be used as cryptographic hardware root of trust for securing devices, communications and data.
Our speakers will introduce the AWS IoT ecosystem, explaining some key concepts, discuss security and present a live demo of Greengrass in action.
Agenda
Welcome & Introductions
What is AWS IoT Greengrass?
How MULTOS supports Greengrass
The Demo
Q&A
When: Wednesday, March 24, 2021 · 03:00:00 PM · London
Duration: 45 minutes
Language: English
Who can attend? Everyone
Dial-in available? (listen only): Yes
Dial-in Number: Please register for this Webinar to view the dial-in info.
Click Here for More Information & Registration

ManuSec: Cyber Security for Manufacturing Summit
2021-06-01 - 2021-06-02 | Reading
ManuSec: Cyber Security for Manufacturing Summit launches online on 1st – 2nd June.
This is an opportunity for manufacturing security leaders across Europe to come together and join forces with 100’s of experts across the region.
Throughout the 2-day program, attendees will learn how to build resilience, mitigate risks and develop a cyber security strategy to combat new and ongoing threats.
Attendees will also benefit from access to ManuSec Europe’s co-hosted Data Manufacturing Summit – Earning up to 24 CPE credits and gaining expert knowledge and
insights from across both streams!
Agenda topics include:

Making cyber security a priority in your digital transformation journey
The impact of cyber attacks on industrial environments
Reducing security risks posed by the human factor
Cyber security for SCADA and plant control systems
Achieving business resilience through converged IT-OT cyber security strategies
And, more!

Take a look at the detailed agenda and secure your free pass* using the code “IOT-SEC” online here
*Offer is valid for end-users only. Vendors and consultants are not eligible but can redeem but can redeem a 15% discount with the code IOT-15

IoTSF Plenary 30
2021-06-16 14:00 - 16:30 | Webinar
This virtual plenary session follows the progress of the IoTSF Working Group Projects which include the IoTSF Compliance Framework, Secure Design Best Practice Guides, Smart Buildings & Supply Chain Integrity groups.
This plenary also features wider IoTSF operations and partnership updates as well as industry guest speakers from NIST and Beau Woods from I am the Calvary.

This event is for IoTSF members and is open to invited non-members.
Not sure if your company is a member? Check here: https://iotsecurityfoundation.org/our-members
Find out more about IoTSF here: https://iotsecurityfoundation.org
If you are not a member and would like to attend, or you have any queries please email Angela.tansey@techworks.org.uk

Register for FreeBEAU WOODS
I am the Cavalry
×Beau Woods
I am the Cavalry
Beau Woods is a Senior Advisor with CISA, Cyber Safety Innovation Fellow with the Atlantic Council, a leader with the I Am The Cavalry grassroots initiative, Founder/CEO of Stratigos Security, and sits on the board of several non-profits.
His work bridges the gap between the security research and public policy communities, to ensure connected technology that can impact life and safety is worthy of our trust. He formerly served as Entrepreneur in Residence with the US FDA, and Managing Principal Consultant at Dell SecureWorks.
Over the past several years in this capacity, he has consulted with the energy, healthcare, automotive, aviation, rail, and IoT industries, as well as cyber security researchers, US and international policy makers, and the White House. Beau is a published author, frequent public speaker, often quoted in media, and is often engaged for public or private speaking venues.
Read Bio

Promoted Event: Hardwear.io Security Trainings & Conference USA 2021
2021-07-05 - 2021-07-10 | Reading
About this event

Hardwear.io Security Conference and Training is a platform for hardware and security community where researchers showcase and discuss their innovative research on attacking and defending hardware.
The third hardwear.io – USA edition will include practical 4-Days online trainings and 2 days conference includes technical Talks, CTF & Fixup networking event.
For more information, visit: https://hardwear.io/usa-2021

Training Date: 5-8 July 2021 | Time: 9:00am to 2:00pm PDT
Conference Date: 9-10 July 2021 | Time: 9:00am to 1:00pm PDT

Training List

Assessing and Exploiting PLCs by Justin
Protecting the CAN bus by Ken
IC Reverse Engineering Code Dump by Olivier
Optimizing crypto on embedded microcontrollers by Peter Schwabe
Reverse Engineering Firmware with Ghidra by Eric
BootPwn: Breaking Secure Boot by Experience by Niek & Cristofaros
EMFI and Voltage Fault injection attacks with Raiden by Grzegorz & Adam

Keynote Speakers:

Prof. Yongdae Kim, Department of Electrical Engineering at KAIST
Colin O’Flynn, C.T.O. of NewAE Technology

Conference Talks:

Jiska Classen: Interacting with *OS hardware from user space
Andrew Zonenberg: Boost your hardware reversing with glscopeclient
Ta-Lun Yen: Enabling dynamic analysis of Legacy Embedded Systems in full emulated environment
Joshua Beaker: Proving the efficacy of software countermeasures for fault injection

EXCLUSIVE IoTSF DISCOUNT: use COMMUNITY5 for 5% discount on training
For more information, visit: https://hardwear.io/usa-2021

AESIN Virtual Security Conference
2021-07-21 10:00 - 15:00 | Virtual Event
Register

The Automotive Electronic Systems Innovation Network is a sibling community to the IoT Security Foundation. Each year it hosts a dedicated cybersecurity conference focussed on the evolving automotive domain. IoTSF members are welcome to join the proceedings – registration is free:

At the AESIN Security Conferences in 2019 and 2020 Industry and Academia combined to set out the Cyber resilience challenge facing the automotive industry as we transition to greater autonomy, ever increasing levels of connectivity and vehicle system complexity. To outline an approach and to ask for your help in understanding how to operationalise Cyber Resilience, what research could be repurposed to kick start a solution, and how to meet and where necessary influence our regulatory obligations.

Now in 2021 we’re back to explain and debate what, with your help we, we have done to refine the approach and to demonstrate its technical and economic feasibility at scale.
Hosted by Peter Davies, Director Security Concepts, this Virtual Conference will provide insight into the latest thinking and experiences from leading cross-industry players, considering topics such as skills requirements, digital trust, secure architecture, cryptographic keys/authentication, robustness – resilient application interfaces and remote updates/access/firmware OTA (over-the-air).
In three sessions we will cover:

Operationalising Cyber Resilience engineering
Cyber Resilience legal and insurance
3rd party access, data and software implants, developing the EcoSystem

Dr Stephen Lambert, AESIN Chairman
Dr Stephen Lambert received his Doctorate from the University of Warwick by looking at the applicability of hybrid and electric drivetrains in motorsport. Following this he worked at Lotus Engineering, developing hybrid and electric demonstrator vehicles..
READ MORE×Dr Stephen Lambert
AESIN Chairman
Dr Stephen Lambert received his Doctorate from the University of Warwick by looking at the applicability of hybrid and electric drivetrains in motorsport. Following this he worked at Lotus Engineering, developing hybrid and electric demonstrator vehicles for a number of OEMs.
Through this role, he found himself working closely with battery manufacturers as a key partner for these projects. He has since worked in various roles around developing battery technology in areas such as Formula 1 and high performance road cars. He is now responsible for the electrification strategy for automotive customers with McLaren Applied technologies, where he is helping deliver advantage by empowering customer to introduce and protect new vehicle concepts and technologies and to drive differentiation in the market
CloseDavid Skipp
Director, Ford Motor Company

David Skipp is Director, Autonomous Vehicle & Mobility Strategy, Ford Mobility at Ford Motor Company. In this role since May 2020, David leads European strategy development for Autonomous Vehicles (AV) and Mobility Solutions. David also works closely with a number of industry bodies, and…
READ MORE×David Skipp
Director, Ford Motor Company

David Skipp is Director, Autonomous Vehicle & Mobility Strategy, Ford Mobility at Ford Motor Company. In this role since May 2020, David leads European strategy development for Autonomous Vehicles (AV) and Mobility Solutions. David also works closely with a number of industry bodies, and is currently Chair of the Intelligent Connected Autonomous Mobility (ICAM) working group of UK Automotive Council.
In his previous role, David was Director, Partnerships & Innovation, Ford Mobility, responsible for working with external partners to build a portfolio of opportunities to grow Mobility business solutions.
Since graduating from Brunel University with a multi-discipline engineering degree, David has held a number of Powertrain Development, Vehicle Development, Research and Strategic Planning roles in over 30 years at Ford Motor Company.
ClosePeter Davies, Technical Director, Thales
I love what I do, approach everything with energy and enthusiasm and can always see an angle. As a Technical Director of Thales in the UK I have been their leading expert on Cryptography in the UK responsible for providing cryptography and information security direction and expertise…
READ MORE×Peter Davies
Technical Director, Thales
I love what I do, approach everything with energy and enthusiasm and can always see an angle. As a Technical Director of Thales in the UK I have been their leading expert on Cryptography in the UK responsible for providing cryptography and information security direction and expertiseon a variety of products and projects. Previous work includes the development and certification of flexible and interoperable commercial security solutions that are also widely used by governments; these solutions are available worldwide and support the security of both communications and infomatics in an international, multi grade environment. My specialist knowledge is at the core of the cyber defence and forensics activities that I undertake combatting existential treats against business. I can, and have, interacted on security and products at any level from Prime Minister, through Board to deep technical including Agencies, Certification Labs and partners developing and sustaining business opportunities worldwide. I have generated patents in the area of digital DNA and my research covers aspects of technical security as well as aspects of super-identities and their role in combatting human based cyber-attacks. I have lead EU security research contract and have acted as a n expert on others. As well as contributing to standards I am a frequent speaker at international conferences and deliver lectures to postgraduate information and cyber security programmes in the UK and worldwide.
Close

IoTSF Member Event: Defending the Cloud: PCIe and CXL Data Security for High-Performance Computing
2021-10-19 17:00 - 18:00 | Reading
Cloud computing is going through a significant overhaul and continues to grow globally with increasing presence of hyperscale cloud providers for big data, high-performance computing (HPC), and analytics. In-house data centers are increasingly going off-premise, resulting in the co-location of data centers that manage and store data for companies and application developers to improve scalability and reduce IT costs. This huge, and growing, amount of data with confidential and critical information must be protected. In addition, new laws and regulations to comply with data privacy rules, along with standards updates for PCI Express (PCIe) and CXL for Integrity and Data Encryption (IDE), put more pressure on solution providers to secure their systems and data starting with the SoC.
In this presentation, attendees will:

Learn about today’s known threats for cloud and edge computing systems
Understand new developments in PCIe and CXL security solutions, including IDEs
Walk through a cloud computing use case that addresses the applications’ security, performance, and latency requirements with DesignWare® Security IP

By the end of the presentation, attendees will understand the importance of securing data moving through PCIe and CXL interfaces, market point of view, and get a reference example for how security can be addressed with DesignWare IP.

Find out more & Register HERE

IoTSF Virtual Conference 2021
2021-11-03 09:00 - 2021-11-04 17:00 | Virtual Event
The 7th Annual Internet of Things Security Foundation Conference is a two-day virtual event that takes place Wednesday 3rd and Thursday 4th November 2021. The Annual IoTSF Conference has built a loyal global following from the IoT stakeholder communities and is renowned for delivering high quality conference programmes.

The era of IoT describes the world as it transforms to be ever-digital and increasingly connected. Along with the power of digital comes the reciprocal cyber threat, and we continue to witness an increasing number of attacks enabled by products that lack protection against well-known exploits, have been badly configured or suffer from poor maintenance. This causes businesses to be hesitant, concerns governments, increases the likelihood of regulation and ultimately frustrates markets.

Vendors must build secure, purchasers must buy secure, and users must be secure: to be without security in a digital world is not an option. Society and industry need to fight back as no one should design, buy, or use a connected product, service or system that lacks fit-for-purpose security. Yet there are no ‘one-size fits all’ security solutions – they are dependent on the application. Most of the attacks we see today can be effectively defended against, many by relatively simple measures.
Organisations need to be informed, the solutions presented, choices made, and those choices need to be in keeping with their business context. Welcome to the 2021 IoT Security Foundation Virtual Conference where we aim to illuminate and educate delegates with an update on the threat landscape, standards & regulation, best practice, next-practice and the latest developments in IoT cyber security. The IoTSF Conference features talks by leading cyber security experts and track sessions for executives, developers, engineers, managers and security professionals.

IoTSF Member Event: Meeting the Challenge of OTA for Embedded Linux Systems
2021-11-23 10:00 - 11:00 | Reading
Webinar Overview:
In this webinar we look at the challenges of managing the process of updating software on embedded Linux systems remotely – often referred to as an Over The Air or OTA update.
The Webinar will cover:

The necessity and challenges of updating devices in the field
Security issues when dealing with remote device updates
The importance of a robust implementation
Additional security measures required for OTA
Adding an OTA mechanism to an embedded Linux build system, like Yocto.

Toradex will demonstrate how this challenge can be solved in a real world example, using the Torizon Platform on hardware featuring NXP i.MX Applications Processors.

CLICK HERE TO REGISTER
Asia and Europe
Tuesday, November 23, 2021
Time: 10-11am (GMT) 11am-12pm (CET) 3.30-4.30pm (IST)

Americas
Tuesday, November 23, 2021
Time: 10-11am (PST) 11-12pm (MST) 12-1pm (CST) 1-2pm (EST)
