GlobalPlatform June Newsletter – Expert Videos, SESIP & IoT Security

MEMBER NEWS: Winbond TrustME® W77Q Secure Flash Obtains SESIP Level 2 with Physical Attacker Resistance Certification

GlobalPlatform Full Member Winbond Technology Ltd. has announced that its TrustME^® W77Q Secure Flash has obtained Security Evaluation Scheme for IoT Platforms (SESIP) Level 2 with Physical Attacker Resistance Certification. This is providing connected devices with a higher level of assurance by requiring a vulnerability analysis and actual penetration testing on IoT platform design systems using Secure Flash in compliance with security and functional safety standards simultaneously.

The SESIP methodology is reducing the complexity, cost and time-to-market for IoT product manufacturers like Winbond, helping to bring greater trust to the IoT ecosystem.

New SBOM Sub-Task Force

GlobalPlatform has launched a new sub-task force dedicated to analyzing and providing guidance on the impact of the Software Bill of Materials (SBOM).

Chaired by Gonda Lamberink, the SBOM sub-task force within the IoTopia committee will collaborate within GlobalPlatform and with external organizations, to define any necessary requirements for technology development in relation to SBOM. The group will also clarify the concepts of software transparency and assurance as well as provide guidance on consistent software transparency and data assurance exchange.

All GlobalPlatform members are eligible to participate in this group.

BLOG: Hybrid Crypto - Anticipating the Break of Asymmetric Crypto

Chair of the GlobalPlatform Crypto Sub-Task Force, Beatrice Peirani, has published a blog exploring ‘Hybrid Crypto’ – the combination of two different algorithms that offer guaranteed security against multiple different attack models.

In the blog, Beatrice also explains how GlobalPlatform is helping stakeholders harness the power of hybrid crypto and aiding connected industries in mitigating potential threats by aligning with other Standards Development Organisations including NIST.

Highlights from GlobalPlatform’s SESIP Workshop

We recently held our first Secure Evaluation Standard for IoT Platforms (SESIP) workshop in Austin, Texas. This workshop treated delegates to an entire day of IoT security insights, highlighting the importance of collaboration between security schemes to safeguard the future of connected devices and industries. Our recent blog reflects on these discussions, sharing some of the key insights of the day on how stakeholders can utilize SESIP to safeguard connected ecosystems. You can also download speaker presentations.

Interested in learning more about SESIP? Get in touch to learn more about our upcoming SESIP training sessions by emailing ana.lattibeaudiere@globalplatform.org.