Abstract
This talk describes Uptane, the first compromise-resilient security
system for over-the-air updates for the computerized units of automobiles.
Uptane can thwart attacks from malicious actors who can compromise
servers and networks at the manufacturing level. Hence, it is designed
to be resilient even to the best efforts of nation state attackers.
Uptane is integrated into Automotive Grade Linux, an open source
system currently used by many large OEMs, and has also been adopted
by a number of U.S. and international manufacturers. Within the next
few years, more than one-third of new cars on U.S. roads will include
Uptane. Uptane is also an IEEE/ISTO standard and is currently hosted
by the Joint Development Foundation of the Linux Foundation. The Uptane
Standards document is freely available and can be accessed free of
charge. Other materials, including technical papers, security audits,
and a public reference implementation are also freely available for
all to use.
Speaker's Biography
|
Justin Cappos is an associate professor in the Computer Science and
Engineering department at New York University. Justin's research
focuses on practical systems security research advances that can be
used in production.
His research advances are adopted into production use by Docker, git,
Google, Python, VMware, automobiles, Cloudflare, Microsoft, Digital
Ocean, and most Linux distributions. Due to the practical impact of
his work, Justin was named to Popular Science's Brilliant 10 list
in 2013.
His website is at:
https://engineering.nyu.edu/faculty/justin-cappos
|
|
|
Printable version.