Should We Trust Mobile Computing, IoT andthe Cloud? No, But There Are Solutions
April 20, 2015
9:00AM – 1:00PMWelcome and Introduction to theTrusted Computing Group (TCG)
Dr. Joerg Borchert
TCG President and Chairman

Copyright 2015 Trusted Computing GroupPrinciple of Least Privilege Leads toRoot of Trust (RoT) Concept• RoT = Minimized, strongly protected security function• RoT used for highly security-sensitive functions– Generate random numbers– Store and use long-term keys
– Verify system integrity• Benefits– Reduce risks• Compromise of long-term keys
• Undetected system compromise

Copyright 2015 Trusted Computing GroupWhy Hardware?
Software Security is Not Enough

Graph used withpermission ofCapers Jones.

Copyright 2015 Trusted Computing GroupWhat is a Hardware Root of Trust?
• Hardware Security• Trusted Platform Module (TPM)• Benefits• Foundation for Secure Software• Impervious to attacks/hacks• Built-in virtual smart card

• Features• Authentication• Encryption• Attestation
Copyright 2015 Trusted Computing Group

Identity
IntegrityBuilding Trusted Systems
1. Build a Hardware Root of Trust into
each device or use the ones you havein PCs, servers, other systems
2. Employ Hardware Storage Encryption
3. Add Security Automation
4. Protect Legacy Systems
Copyright 2015 Trusted Computing GroupTCG = Open Standards for Trusted Computing• TCG is the only group focused on trusted computing
standards• TPM specification implemented in more than a billion
devices– Chips, PCs, servers, printers, kiosks, industrial systems, and many
embedded systems• Trusted Computing is more than TPM– Secure Storage– Security Automation– Secure Cloud– Secure Mobile Devices– Secure Legacy Devices

Copyright 2015 Trusted Computing GroupWhy Open Standards?

Interoperability
Security
Lower Costs

Vendor Neutrality
Certification
Ubiquity

Copyright 2015 Trusted Computing GroupTCG Evolving: Join Us••••Classic work groups, such as TPM, remain active– TPM Software Stack, PC Client specifications for 2.0 emerging– Storage releasing significant updates this summer– TNC doing significant architectural updates
Mobile: new relationship to collaborate with ETSI; existing
relationships with GlobalPlatform and others
Embedded: new automobile thin specification released to enablesecure remote software updates to vehicles, this week at SAE World
Congress with SAE committee input.
Internet of Things: new guidelines for securing IoT published as
implementation guidance with more to follow

Copyright 2015 Trusted Computing GroupTCG Appoints Executive Director
Mark Schiller to lead membership andstrategic initiatives as TCG continues toevolve to increasingly important computing
and security applications, including cloudservices, mobile computing and Internet ofThings.
Contact: Mark@TrustedComputingGroup.org
Meet Mark in the Demonstration Showcase Room2006 to learn more about TCG and its efforts!
Copyright 2015 Trusted Computing GroupDriving Adoption of Standards
 Join the TCG in the quest to develop and promote trusted computingtechnologies
 Research; Standards writing; Published studies; and Continuing education

 Join to help influence developers and enterprise end-users

Technologies In Action:Security
Automation

Embedded Systems
TPM Mobile

Internet ofThings (IoT)

TPM Software Stack

Trusted Platform
Module (TPM)

Endpoint Compliance

Opal & Enterprise
DrivesIndustrial Control
Systems (ICS)

Open-source
Network Security

Self-encrypting
Drive (SED)
Copyright 2015 Trusted Computing Group

Virtualized Systems11

Demonstration Showcase
Over 25 member and partner companies showcasing TCG technology usage

Copyright 2015 Trusted Computing GroupSession Schedule
9:20

9:45

10:45

20-Story Snowcastle: Why We Need a New
Foundation for the Internet of Things

Paul Roberts, Founder, Editor-in-Chief, Security Ledger

Moderator: Paul Roberts – Founder, Editor-in-Chief, Security Ledger
Panelists:
Panel: Security and the Root of Trust: Leveraging • Amy Nelson – Engineering Technologist, Dell
the Root of Trust and TPM in the Enterprise• David Bossio – Group Program Manage, OSSG Enterprise andSecurity R&D, Microsoft
Refreshment Break – Room 2006

Panel: The Insecure Internet of Things and Howto Secure It

Moderator: Rich Nass, Executive Vice-President, EmbeddedComputing.com, OpenSystems Media
Panelist:•Stacy Cannady, Senior Principal Cisco Systems•
Darin Andersen, Founder, CyberUnited•
Chuck Benson, Assistant Director of IT, Facilities Service,
University of Washington

12:00

Panel: Mobile is King, But Security Must Be aPriority

Moderator: Jai Vijayan; Technology Editor/Writer
Panelists:•Gil Bernabeu, Technical Director, GlobalPlatform•
Lee Neely, Senior Cyber Analyst, Lawrence Livermore National
Laboratory (LLNL)•Jon Geater, Chief Technology Officer, Trustonic

13:00

End of Session Live Raffle Drawing

Products Donated by:• Infineon Technologies• Samsung Electronics

11:00

20-Story Snowcastle: Why We Need a
New Foundation for the Internet of Things
Paul Roberts
Founder and Editor-in-Chief,
Security Ledger

Copyright 2015 Trusted Computing Group