Open Source Summit + Embedded Linux Conference + OSPOCon 2021

Pipelines, meat packing plants, and security cameras are making headlines these days, but for the wrong reasons -- vulnerability to cyber attacks. The software powering industry is sometimes decades old. But even new IoT devices are getting hacked. Every day we use HTTPS/TLS to protect our Internet connections. But can we be sure the underlying host OS hasn’t been tampered with? If only we could put the entire edge stack inside a protected TLS link where only the owner had a key. The security-by-design philosophy of LF Edge project EVE started with that premise -- to establish a root-of-trust-based, TLS-encrypted link first, so that deployed apps would not pose an operational risk. Anything from legacy VMs, to modern containers to unikernels, would run only at the whim of the EVE API keyholder. No breach of apps could compromise an edge node. EVE benefits: -No worries recovering from ransomware attacks to regain control of edge nodes -No vendor lock-in -Remote lifecycle mgmt mimics cloud-native -IT staff can relax -No extra burden on application developers! In this talk, Kathy will describe EVE’s open API, and the open source EVE-OS and EVE controller. If you’re an app developer or IT professional who wants less stress/work to secure your edge nodes, this talk is for you!