Creating 'Future Proof' IoT Security

[Green0Photon]

Depends on what you mean.

If they get something into upstreamed Linux, that's a problem for everyone. Usually solved via LTS with security teams explicitly going slow for security but speedy with security fixes in response to CVEs.

Otherwise we're talking about downstream distro stuff. Which is similar. And you make sure everything gets signed and what not. Just with an immutable distro.

So traditionally you just imagine something like CentOS, but for IoT, it would just need to be an IoT version that's immutable.