On-Demand webinar
Hardened Yocto
Overcoming Challenges with Building a Secure Embedded Linux OS
Originally delivered at embeddedworld North America in 2024, this on-demand webinar is a discussion of security from a Yocto-specific perspective. The Yocto Project is widely used in embedded systems, billing itself as “the de facto industry standard tool kit for building custom embedded Linux operating systems.” It is customizable for any size system and enjoys a large third-party ecosystem to extend its feature set. Star Lab’s work involves developing novel security solutions for mission critical embedded Linux systems. As such, he is intimately familiar with the many challenges and opportunities presented by the Yocto Project when attempting to develop a secure-by-default image.
Ben surveys some of the major security technologies included in the Yocto Project, either as core components or in third-party layers. These include general kernel and userspace hardening, SELinux and LUKS encryption. He also discusses some of the best practices for using these technologies, and the unexpected challenges he has encountered when integrating them alongside Star Lab’s technologies. Lastly, he also discusses how Yocto enables many of Star Lab’s security technologies in a way that would not be possible with a binary distribution.