BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//FIDO Alliance - ECPv6.18.2//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:FIDO Alliance
X-ORIGINAL-URL:https://fidoalliance.org
X-WR-CALDESC:Events for FIDO Alliance
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:America/New_York
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20240310T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20241103T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20250309T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20251102T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20260308T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20261101T060000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20250305T090000
DTEND;TZID=America/New_York:20250305T163000
DTSTAMP:20250320T135144Z
CREATED:20250221T151138Z
LAST-MODIFIED:20250320T135144Z
UID:83953-1741165200-1741192200@fidoalliance.org
SUMMARY:Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers
DESCRIPTION:Location\n\n\n\nNCCoE9700 Great Seneca Highway\, Rockville\, MD 20850 \n\n\n\nFeatured Keynote\n\n\n\nBrad GoodmanFIDO DO Working Group ChairDistinguished Member of Technical Staff\, Edge Computing Architect\, Dell \n\n\n\nOverview\n\n\n\nLeveraging FIDO Alliance cybersecurity standards in support of IR8259 \n\n\n\nAs highlighted in IR8259\, “If a device is expected to be more trusted by customers\, particularly to remain in a secure state and stay outside the control or access of unauthorized entities\, then it is likely that technical means implemented on or with that device will have to be more robust.”. \n\n\n\nFor IR8259 to be implemented effectively\, devices must cooperate reliably and securely.  This requires that there be a strongly authenticated and protected communication channel between M2M and IoT devices.  Existing protocols and authentication techniques can help to create and maintain such a channel.  However\, an absolute requirement for this is a rigorous enrollment process\, providing positive assurance of each machine’s identity\, in order to establish the necessary foundation for secure interactions.  A weak enrollment procedure of even one part leaves the system vulnerable to impersonation and compromise. \n\n\n\nFrom a cybersecurity viewpoint this requires that IoT products must: (a) be able to establish secure communication channels\, (b) provide uses with a secure and private method of accessing their IoT data (c) be able to be provisioned with robust software\, (d) be securely connected to their management platform (whether in the cloud or on-site)\, (e) be software upgradable (to respond to cyber threats and also to deliver new features) and (f) can be returned to a ‘Known Good State’ in a worse case situation. Additionally\, users of a device must be able to log-in securely via their cloud portal to access their data.  \n\n\n\nIn this presentation\, Brad will review key points raised by IR8259 and show how:  \n\n\n\n\nSecure communication channels can be established for M2M and IoT applications\n\n\n\nFIDO passkeys for phishing resistant\, passwordless public key based secure user data access via cloud portals. \n\n\n\nHow FDO and other FIDO solutions now in development can make the task of creating flexible yet robust IoT devices that can be protected throughout their lifetime.
URL:https://fidoalliance.org/event/workshop-on-foundational-cybersecurity-activities-for-iot-device-manufacturers/
ATTACH;FMTTYPE=image/png:https://fidoalliance.org/wp-content/uploads/2025/02/Workshop-on-Foundational-Cybersecurity-Activities-for-IoT-Device-Manufacturers.png
END:VEVENT
END:VCALENDAR