Tech Briefs Magazine - September 2022 - 24

Cybersecurity
chip can be implemented at different
security levels and is equipped to protect
against even the most sophisticated
attacks.
For low-cost, low power endpoints,
DICE provides cryptographically strong
device identities which forms the foundation
for attestation for software updates,
patches and so on. It helps to
provide viable security and privacy foundations
for systems without a TPM and
enhances the security and privacy of
systems with a TPM. In both cases it creates
a strong device identity, attestation
of device firmware, and security policy
with verification of software updates and
safe deployment.
The DICE model offers strong attestation
of device identity, firmware, and
security along with the secure deployment
of software updates. All these features
make it a great tool for manufacturers
and developers who can recover
the device securely following a compromise,
attest device firmware and
security policy, and allow for secure
software updates. Suitable for low-cost,
low power endpoints, DICE provides
strong security and privacy foundations
for systems without a TPM, but it also
enhances the existing protection and
privacy on those with a TPM.
Let's Work Together
Good IoT security practices and
strategies still have a long way to go.
There is a great need for more businesses
and individuals to get on board.
As the deployment of IoT heightens in
popularity, it is crucial there are a variety
of measures available for system
developers and product manufacturers
to ensure devices remain safe and
secure throughout their lifetime.
The first nine months of 2021 saw
40 percent more cyberattacks compared
to the same period in 2020 with
2022 expected to see a further increase.
One of the biggest, and arguably
the most important, challenges
in the realm of hardware supply chain
security and integrity is the number
of different organizations or groups
involved; everyone implements different
processes and methods to varying
levels of success.
To truly ensure end-to-end protection
and integrity, we need industry standards
that provide guidance for all stages
of the supply chain and device lifecycle.
Implementing a hardware RoT is a
fundamental place to start.
By encouraging a security first approach
through the continued prevention
of malware and viruses along with
resilience to recover a device once compromised,
the ecosystem remains secure
and safeguarded through futureproof
measures and tools. As cyberthreats grow
in sophistication and IoT applications
become complex, the industry can be assured
there is a safe, secure future for all
where information remains protected,
and systems remain online.
The Trusted Computing Group
(TCG) has developed a wealth of security
standards and trusted computing
technologies which address the security
challenges of today and the future.
This article was written by Dennis Mattoon,
Board Director, Trusted Computing
Group (Beaverton, OR). For more information,
visit www.trustedcomputinggroup.org.
24
www.techbriefs.com
Tech Briefs, September 2022
http://www.trustedcomputinggroup.org http://info.hotims.com/82325-712 http://www.techbriefs.com
Tech Briefs Magazine - September 2022

Table of Contents for the Digital Edition of Tech Briefs Magazine - September 2022
