Patch at Scale: What CRA-Ready Software Updates Look Like in the Real World
Under the Cyber Resilience Act, discovering a vulnerability is not enough. OEMs need a secure and repeatable way to remediate vulnerabilities across products already operating in the field. For embedded and IoT teams, that becomes especially challenging across heterogeneous hardware, software versions, unreliable networks, and large device fleets.
This session examines the engineering practices behind secure vulnerability remediation at scale, including identifying affected devices, signed software artifacts, phased deployments, automated rollback, update verification, and maintaining an auditable.
(This proposal is for a 25-minute technical session; however, we are also open to participating in a panel or other opportunities.)
Ed Watson is an Embedded Linux Engineer working in Gothenburg, Sweden for Northern.tech (HQ in Oslo). He worked as a Senior Software Engineer developing 3D cell and organ printers and has a doctoral background in 3D and systems mathematical modeling. Ed specializes in embedded Linux, OTA device management, Yocto and systems architecture. He is known as a "fixer of things".