wiki:GEC10TUFSecureUpdateTutorial

Tutorial: How To Securely Update Your Software With TUF

Organizers

Geremy Condra and Justin Cappos, University of Washington, Seattle

Time

Thurs 9:30 - 10:30 am

Description

This tutorial shows how to ensure that malicious attackers do not compromise your system through its software updater. This tutorial is a must attend for any GENI developer that needs to update deployed software.

We will show (very rough plan):

  • An overview of TUF (15-20 mins)
  • A demonstration of attacks on an insecure updater. (5 mins)
  • A demonstration of those attacks failing on an updater secured by TUF. (5 mins)
  • How to take an example updater and change it to use TUF (15 mins).
  • Open Questions / Discussion. (15 mins)

Prerequisites

None

Please arrive with…

Code for your favorite software updater!

Pre-work

None.

Results

After completing this tutorial, you will be able to protect your software updater from attack.

Last modified 8 years ago Last modified on 02/04/11 11:31:40