Cyber security for embedded Linux

Hi All,

I'm curious as to the thoughts on cyber security for embedded Linux? How important is cyber security in your applications? What methods do you use?

I think this topic is going to become more important over time as the use of Linux becomes more pervasive in IoT, Robotics, and other embedded applications. Let's start a discussion.

David

https://www.us-cert.gov/ncas/alerts/TA16-250A
https://www.us-cert.gov/ncas/alerts/TA16-288A

in lights of recent DYN DDOS attack, i've been thinking and asking myself why this happened.

the surprise conclusion i reached is that the root cause might be the fault of Linux OS, which is powering internet servers and many IoT devices. after i search online with search word 'internet is insecure because deficiency of Linux', i found this article on washington post which further confirm my theory:

http://www.washingtonpost.com/sf/bus...-the-argument/

Weak security or high value targets are places I'd start if I were a hacker. IoT is using weak security models from 20 years ago.

Originally Posted by xiongnu in lights of recent DYN DDOS attack, i've been thinking and asking myself why this happened. the surprise conclusion i reached is that the root cause might be the fault of Linux OS, which is powering internet servers and many IoT devices. after i search online with search word 'internet is insecure because deficiency of Linux', i found this article on washington post which further confirm my theory: http://www.washingtonpost.com/sf/bus...-the-argument/

No, that doesn't confirm anything. Linus treats bugs as bugs. Whether they are security related or not.

Linux has some of the best security capabilities in existence.

Vendors DO have to turn them on, use them, and owners have to configure them where necessary.