October 31 - November 1 - Co-Located Events
October 28-30 - Conference
Lyon Convention Centre - Lyon, France
More information for Open Source Summit + Embedded Linux Conference Europe 2019
Back To Schedule
Monday, October 28 • 16:20 - 16:55
Safety vs Security: A Tale of Two Updates - Jeremy Rosen, Smile.fr

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
When developing a product, safety and security usually go along nicely : Both want a product that has no remaining bugs.

However, once the product is out, the constraints of safety and security tends to be very contradictory. Safety tend to avoid updating the product, whereas security wants the exposure window to be as small as possible.

The embedded ecosystem always had a culture heavily influenced by safety, and this is one of the few places where product owners will say "no" to security if they are not confident that it won't compromise safety.

This talk will analyze the two philosophies, based on Jeremy Rosen's experience interacting with safety engineers, security officers, and various product owners and project managers.

Once the pain points are understood, the talk will discuss how to mitigate them, either through an architectural approch or by giving talking points to present the safety constraints to a security officer and the security constraints to a safety engineer.

avatar for Jeremy Rosen

Jeremy Rosen

Expertise manager, Smile.fr
Jeremy Rosen is a French engineer with more than fifteen years of experience in all aspects of embedded linux systems and open-source developement. He manages the expertise branche of Smile-ECS and gives courses in various embedded linux developement and integration, specializing... Read More →

Monday October 28, 2019 16:20 - 16:55
Forum 3
  • Session Slides Included Yes