Zero Trust (Trust no one, but always verify) has recently become a hot topic in the network security world, where it shifts the paradigm from trust-based on physical connectivity to the one that involves always authenticating every access. The US has also issued an executive order on cybersecurity to embrace Zero Trust not just for networking but also for any products/ services that we build, and semiconductors are at the heart of everything nowadays. In this talk, we shall cover a holistic view of Zero Trust right from the silicon up to software-level security, and how can improve the trust of the platform and every component in it. A platform-level Trusted Execution Environment (TEE) design with configurable and dynamic Trusted Computing Base (TCB) will be explored. A platform-level Root-of-Trust (RoT) to facilitate authentication, encryption of data exchanged between every component, and platform-wide remote attestation to verify the firmware integrity of every component in the platform will be discussed. Also, topics related to supply chain security and trusted foundry will be discussed.
Executive Director, Technology Innovation Institute
A seasoned security architect/ researcher with vast experience on SoCs/ CPUs, currently leading an R&D team at Technology Innovation Institute in Abu Dhabi.
