New Jersey cyber-security company Sectigo has started a YouTube channel offering engineers guidance for securing IoT products.
 
The video series offers security engineers, developers, product managers, and anyone using or developing connected components and devices guidance ranging from fundamental to advanced level for securing IoT devices.
 
Hosted by Sectigo vice president Alan Grau, the first explainer video in the series encompasses fundamental security topics including embedded security, secure boot, embedded firewall, secure firmware updates, secure key storage, IoT device identity and PKI for IoT. Grau addresses several issues, including:

• Common vulnerabilities found in IoT devices
• What security actually means for IoT devices
• Which types of IoT security products actually work, and why
• Security claims versus security realities for IoT devices
• Challenges of building security into IoT devices

The second video looks at secure boot for IoT and covers IoT security, embedded security, secure boot and secure firmware updates. Grau provides both an overview and a deep dive into secure boot and how the functionality can help secure IoT devices by ensuring they are always running unmodified code from the OEM. He also discusses the various ways hackers attack embedded devices, root of trust, code signing and code validation.

In a video about embedded firewalls, Grau covers what embedded firewalls are and how they are different from other network and endpoint firewalls. He discusses the challenges of building security into IoT devices, why embedded firewalls are important and essential features, as well as embedded use cases for automobile (ADAS) and aircraft control systems.

Grau has 30 years of experience in telecommunications and the embedded software marketplace. He joined Sectigo in May 2019 as part of the company’s acquisition of Icon Labs, a provider of security software for IoT and embedded devices, where he was CTO and co-founder, as well as the architect of Icon Labs’ Floodgate Firewall. Prior to founding Icon Labs, Grau worked for AT&T Bell Labs and Motorola. He has an MS in computer science from Northwestern University.

Sectigo is a cyber-security provider of digital identity products, including TLS and SSL certificates, DevOps, IoT, and enterprise-grade PKI management, as well as multi-layered web security. As a commercial certificate authority with more than 700,000 customers and over 20 years of experience in online trust, Sectigo partners with organisations of all sizes to deliver automated public and private PKI for securing web servers, user access, connected devices and applications.

The YouTube channel can be found at: https://www.youtube.com/channel/UCpBIBygkjPsEdrGkkWNGOsQ