Tutorial: How To Securely Update Your Software With TUF

Organizers

Geremy Condra and ​Justin Cappos, University of Washington, Seattle

Time

Thurs 9:30 - 10:30 am

Description

This tutorial shows how to ensure that malicious attackers do not compromise your system through its software updater. This tutorial is a must attend for any GENI developer that needs to update deployed software.

We will show (very rough plan):

• An overview of TUF (15-20 mins)
  
• A demonstration of attacks on an insecure updater. (5 mins)
  
• A demonstration of those attacks failing on an updater secured by TUF. (5 mins)
  
• How to take an example updater and change it to use TUF (15 mins).
  
• Open Questions / Discussion. (15 mins)
  

Prerequisites

None

Please arrive with…

Code for your favorite software updater!

Pre-work

None.

Results

After completing this tutorial, you will be able to protect your software updater from attack.