Look Who it Was Random video

Surviving in the Wilderness: Integrity Protection and System Update - Patrick Ohly, Intel GmbH

1,348 views · Published 28 February 2017 · 51:46 · Indexed 6 November 2026

Channel: The Linux Foundation · 2017 · Science & Technology

Watch on YouTube

Surviving in the Wilderness: Integrity Protection and System Update - Patrick Ohly, Intel GmbH

IoT devices are almost certainly going to become insecure over time due to newly discovered vulnerabilities. An over-the-air (OTA) update mechanism is required to fix devices deployed in the field. When the environment in which the devices operate allows attackers to tamper with them, then it becomes important that the devices not only detect attempts to modify the OS while running, but also while the device was powered off.

Patrick Ohly is the maintainer of meta-integrity and meta-swupd, two layers which make the Linux Integrity Measurement Architecture (IMA) and the Clear Linux OS swupd update mechanism available to Linux distributions built with Yocto/OpenEmbedded. This talk will compare these two approaches against several alternatives (dm-verity, OSTree, ...) and explain how to use these layers.

About Patrick Ohly
Patrick Ohly is a software engineer at Intel GmbH, Germany. In the past he has worked on performance analysis software for HPC clusters ("Intel Trace Analyzer and Collector") and cluster technology in general (PTP and hardware time stamping, included in Linux since 2.6.30). Since January 2009 he works for Intel's Open Source Technology on PIM data storage and synchronization, in particular SyncEvolution, a project he started in 2005. Currently he is working on an IoT OS based on OpenEmbedded and the Yocto Project.

More from this channel