Asia-24-Pinto-What-The-TrustZone-M-Doesnt-See

#BHASIA @BlackHatEventsWhat the TrustZone-M Doesn't See, theMCU Does Grieve OverLessons Learned from Assessing a Microcontroller TEECristiano Rodrigues | Sandro Pinto, PhD (Centro ALGORITMI / LASI, Universidade do Minho)# BHASIA @BlackHatEventsWhat the TrustZone-M Doesn't See, theMCU Does Grieve OverLessons Learned from Assessing a Microcontroller TEECristiano Rodrigues | Sandro Pinto, PhD (Centro ALGORITMI / LASI, Universidade do Minho)AGENDAIntroductionBackground and Motivation0102A Bumpy but Revealing JourneyWeak Protections, TEE Assessment and our Responsible Disclosure Journey 03What Can Go WrongAttack Examples and “Live” Demo04Lessons LearnedAdvices for HW & SW providers and System Designers05SummaryFinal Thoughts and BH Sound BytesIntroductionBackground and MotivationINTERNET OF THINGSHOMEAPPLIANCESWEARABLESDRONESHARDWAREWALLETSMEDICALDEVICESSMARTCITIESSMARTFACTORIESAUTONOMOUSVEHICLESAI-ENABLEDEDGE DEVICES