Building an embedded product is a complicated task. Especially a secure embedded product... Fortunately, the Yocto Project/OpenEmbedded provides a number of security features that you can use out-of-the box. Marta is going to present her personal picks with practical examples, and research results. She is going to cover subject including: * checking your dependencies (and their dependencies) for security issues with the brand new changes in CVE and NVD databases * hardening options (in the compiler compiler, your file system, setting up user permissions...) * cutting unneeded services you didn't know were included * hints on staying up to date without panic and panic() * layers that might help you