Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER &...
Transcript of Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER &...
![Page 1: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/1.jpg)
Dr. Galen HuntDISTINGUISHED ENGINEER & MANAGING DIRECTOR
Microsoft Azure Sphere
![Page 2: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/2.jpg)
![Page 3: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/3.jpg)
Radio
MCU
![Page 4: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/4.jpg)
9 BILLION new MCU devices
built and deployed every year
The microcontroller (MCU)
a low-cost, single chip computer
![Page 5: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/5.jpg)
Before this chip, no MCU was ever connected to the internet.
![Page 6: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/6.jpg)
Data +
intelligence
Optimize
operations
Transform
products
Engage
customers
Empower
employees
![Page 7: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/7.jpg)
Products
Customers
Empower
employees
Large portions of the
organization are not digitized
Data is siloed across
different parts of
the organization
Operations
1
2
Disjoint data
&
intelligence
![Page 8: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/8.jpg)
Data +
intelligence
Optimize
operations
Transform
products
Engage
customers
Empower
employees
New monetization avenues due to IoT-related services
Companies that increased revenue as a result of IoT implementation
Average increase in operating income (avg. 8%) among the most digitally transformed enterprises
p
p
p
Connected “things” by 2025 generating 180ZB of data
p
![Page 9: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/9.jpg)
Data +
intelligence
Optimize
operations
Transform
products
Engage
customers
Empower
employees
![Page 10: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/10.jpg)
![Page 11: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/11.jpg)
![Page 12: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/12.jpg)
![Page 13: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/13.jpg)
![Page 14: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/14.jpg)
![Page 15: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/15.jpg)
![Page 16: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/16.jpg)
Opportunity Risk
![Page 17: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/17.jpg)
What happens when you connect
a device to the internet?
![Page 18: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/18.jpg)
“When smart gadgets spy on you: Your home life is less private than you think”
“Protecting Your Family: The Internet of Things Gives Hackers Creepy New Options”
![Page 19: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/19.jpg)
Mirai Botnet attackOctober 2016
Everyday devices are used to launch an attack that takes down the internet for a day
![Page 20: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/20.jpg)
Hackers attack casino
Attackers gain access to casino database through fish tank
![Page 21: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/21.jpg)
The internet security battle.
We’ve been fighting it for decades. We have experience to share.
![Page 22: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/22.jpg)
SECURITY IS FOUNDATIONAL
It must be built in from the beginning.
![Page 23: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/23.jpg)
Hardware
Root of Trust
Defense
in Depth
Small Trusted
Computing Base
Dynamic
Compartments
Certificate-Based
Authentication
Failure
Reporting
Renewable
Security
The 7 properties of highly secured devices
![Page 24: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/24.jpg)
Some properties depend only on hardware support
Unforgeable cryptographic keys generated
and protected by hardware
Hardware Root of Trust
• Hardware to protect Device Identity
• Hardware to Secure Boot
• Hardware to attest System Integrity
Hardware
Root of Trust
![Page 25: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/25.jpg)
Internal barriers limit the reach of any
single failure
Dynamic Compartments
• Hardware to Create Barriers
• Software to Create Compartments
Some properties depend on hardware and software
Dynamic
Compartments
Defense in
DepthSmall Trusted
Computing Base
![Page 26: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/26.jpg)
Device security renewed to overcome
evolving threats
Renewable Security
• Cloud to Provide Updates
• Software to Apply Updates
• Hardware to Prevent Rollbacks
Some properties depend on hardware, software and cloud
Certificate-Based
Authentication
Failure
ReportingRenewable
Security
![Page 27: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/27.jpg)
9 BILLION new MCU devices
built and deployed every year
Is it possible to create
a secure MCU platform?
![Page 28: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/28.jpg)
Azure Sphere
Certified MCUs
The Azure Sphere
OS
The Azure Sphere
Security Service
Azure Sphere is an end-to-end solution for securing MCU powered devices
![Page 29: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/29.jpg)
Azure Sphere Certified MCUs with a built-in hardware root of trust
created from Microsoft’s learnings securing
three generations of Xbox consoles.
![Page 30: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/30.jpg)
![Page 31: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/31.jpg)
The Azure Sphere OS a multi-layer defense-in-depth OS that
merges the best of Microsoft and OSS
technologies to create a trustworthy
platform for new IoT experiences
![Page 32: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/32.jpg)
![Page 33: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/33.jpg)
The Azure Sphere Security Service guards every Azure Sphere device; it brokers
trust for connectivity through certificate based
authentication, detects emerging threats
through online failure reporting, and renews
device security through software updates.
![Page 34: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/34.jpg)
Secured MCUs
Secured OS
Securing Cloud Service
Even MCUs can be secured if you are committed.
![Page 35: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/35.jpg)
Opportunity Risk
![Page 36: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/36.jpg)
Opportunity RiskResponsibility
![Page 37: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/37.jpg)
Hardware
Root of Trust
Defense
in Depth
Small Trusted
Computing Base
Dynamic
Compartments
Certificate-Based
Authentication
Failure
Reporting
Renewable
Security
The 7 properties of highly secured devices
![Page 38: Dr. Galen Hunt - AFITC Education & Training Event · Dr. Galen Hunt DISTINGUISHED ENGINEER & MANAGING DIRECTOR Microsoft Azure Sphere. Radio MCU. 9 BILLION new MCU devices built and](https://reader033.fdocuments.in/reader033/viewer/2022053003/5f071aa27e708231d41b5337/html5/thumbnails/38.jpg)
Let’s secure the future.