Security Working Group Members Goals and Interests. Cesare Garlati, Chief Security Strategist May 2015

Transcription

1 Cesare Garlati, Chief Security Strategist May 2015

2 Methodology and sampling COMPANY NAME TITLE broadcom Marcus Kellerman Snr Director, Software Systems broadcom Sherman Chen VP Technology Broadband cupp Art Swift Chief Executive Officer elliptictech Mike Borza Chief Technology Officer ikanos Pramod Kaluskar Snr Manager Product Marketing imgtec David Capon Design Engineer imgtec David Lau VP Software Engineering imgtec Majid Bemanian Director of Marketing imgtec Sanjay Patel Senior Manager, Architecture imgtec Dave Roberts Senior Design Manager imperas Larry Lapides VP Sales ingenic LiQin Chen Software Director kernkonzept Adam Lackorzynski CTO kernkonzept Michael Hohmuth Chief Executive Officer lantiq Olaf Wachendorf Head of CPE Software qualcomm Brian Rosenberg Engineering Director qualcomm Kathy Giori Sr Product Manager sartura Luka Perkov Managing Director seltech Shoi Egawa President & CEO seltech Toshihide Watanabe General Manager Sales

3 Market forces behind the formation of the security group Demand Side Increasing demand for stronger security - $77B in 2015 Demand for hardware security layers - in addition to software New multitenant business models multiple service providers - trust Explosion of connected devices home / car / industrial - IoT New privacy / data protection regulations and bigger fines prpl Foundation Development of security open standards open security Open source community development and support Open source framework and APIs no royalties Reference frameworks open to ecosystem partners development Across vendors and architectures - initially focused on MIPS Supply Side Availability of security features at the silicon level - resiliency Availability of hardware support for virtualization - multitenancy Multicore architectures secure / not secure model doesn t scale Multiprocessor architectures multidomain security cpu, gpu, Proprietary security frameworks too expensive to implement

4 Charter: verbatim comments We see new requirements, new markets, the green field space is being formed we see a clear gap in this space and how you can deploy services based on virtualization protecting the box from being accessed or data extracted from the box. That's more of the aspect of security that we are interested to working with prpl on the more software that's involved, the less secure things tend to be just generally it's important to stress the 'feature' is security, a 'method' to deliver it is virtualisation virtualization may be too expensive in terms of hardware memory is still a major cost

5 Charter: objectives, deliverables and timeline Objectives Deliverables Timeline Define open source framework, specification, and set of API's to improve security in small footprint single purpose use cases facilitate the use of virtualization in multitenant / multidomain use cases Reference architecture including hardware, software and documentation Guest speaker series to improve understanding of emerging threat landscape Promote group s activity and standards across the industry Immediately Start thought leadership series (1 guest speaker per month) Q4Y2015 Reference architecture V1 (minimal scope) Q2Y2016 Reference architecture V2 (full scope)

6 Charter: hardware-level security scope Secure Boot Key mgm Crypto hd Secure JTAG Secure Video Streams Linux Containers Hypervisor Multitenant service provisioning Common security framework across hardware and software components

7 Openness to non-mips members and architectures Cross architecture has emerged as a key common requirement 1 prpl initial focus is on MIPS Some members believe an initial focus on MIPS can act as a catalyst for success All members already work across heterogeneous environments 2 3 prpl welcomes the contribution of all industry leaders will eventually encompass diverse architectures

8