Zane Emerick
Test Engineer in SATCOM
With today's modern security risks, the need to ensure a customer won't be infected by your own products is critical. For an assembly-line type system; this can be accomplished fairly easily, just reuse the same known-safe code. In industries such as defense, however, many contracts can be entirely custom pieces of hardware each with their own risks and challenges. In fact, some systems may not have internet connectivity, or even USB ports at all in many cases.
However, these systems still need to be proven secure and virus-free before they can be safely shipped to a customer on contract. When lives can depend on your ability to ensure a system is safe, this proves only more important. Through a combination of various ClamAV tricks and bootable drives, these factors can be quickly overcome. I would like to teach the audience that many of the tools they take for granted simply don't exist in high security and provide examples of workarounds used in the defense industry to still ensure product security.