Thinking Outside the Linux Box - Security Considerations From Human Actors

Explore embedded Linux security from a human-centered perspective in this 41-minute conference talk that examines how social engineering and human behavior create vulnerabilities beyond technical safeguards. Learn to identify security requirements by analyzing relationships between developers, users, and attackers, moving beyond traditional engineering-focused approaches that emphasize secure boot and kernel hardening. Discover core principles for preventing users and developers from compromising security, designing resilient systems that withstand security failures, recognizing how misunderstandings lead to errors, and communicating clearly to reduce social engineering risks. Gain practical, embedded Linux-oriented solutions to human-centric security challenges while developing threat models that account for both malicious actors and legitimate users. Understand how even devices with limited interactability remain vulnerable to social engineering attacks and why incorporating human factors into security planning is essential for comprehensive embedded system protection.