Vulnerabilities in Old Third-Party Software Components- Importance of Having SBoM for IoT/OT Devices

Full Title: Old Code Dies Hard: Finding New Vulnerabilities in Old Third-Party Software Components and the Importance of Having SBoM for IoT/OT Devices

Device manufacturers often rely on "security by obscurity" for their own code - e.g., by encrypting firmware files - and on the "principle of many eyes" when choosing to integrate open source components - i.e., if there are no public CVEs, a component is considered safe.

This talk shows that these principles can fail the manufacturers, but …

code components device devices files firmware hard iot manufacturers old ot devices own party sbom security software software components third third-party vulnerabilities