Winners of the first ever TCG CodeGen Developer Challenge have been crowned

Trusted Computing Group (TCG) logo

Leonardo DRZ have been crowned as the first ever winner of TCG CodeGen Developer Challenge.

The CodeGen Developer Challenge brought together developers from across the industry to participate in the event and create software solutions that embodied the theme, “Pervasive Security and Application of TCG standards in software and hardware development”. The winning team consisted of Njegos Nincic and Jeff Morgan from Leonardo DRZ, who developed two possible solutions to secure the software booting process.

The week-long CodeGen Developer Challenge provided an opportunity for brilliant talents to create a functional prototype built off a TCG standard. Bringing together peers who share the same passion for digital technology and innovation, each team was given a dedicated TCG mentor who was on hand virtually throughout the event.

With the cyber skills shortage and training gap being a prominent issue in the industry, the CodeGen Developer Challenge helped to unite people in learning, exploring, and developing new software designs.

The winning innovation

The winning team developed two possible solutions to add an extra layer of security when verifying the state of data storage. One solution used existing TCG technologies, such as Opal and the TPM, while the other was a potential extension to the TCG Storage Core specification.

Firmware/software corruption mitigation has become increasingly important in both commercial and military applications. Permanent Denial of Service attacks are an increasing concern in these sectors, as they render the system unbootable. A UEFI Secure Boot enabled system will fail to boot if the bootloader is altered or compromised, which is why verification and authentication are so important with the threat of cyberattacks growing in frequency and complexity.

The winner’s system can help a wide range of applications beyond the commercial and military sectors. Using TCG technologies, an extra security protocol is added to check and recover the storage of data. For the potential extension of the TCG Opal SSC specification Nincic and Morgan suggested adding two new commands: Setup Recovery and Toggle Recovery. These commands would add another process to help measure data and enable recovery of the system if needed. This ensures stricter security authentication protocols suitable for critical applications that need additional protection and the extra confidence in secure confidential data.

Industry collaboration

The winners were presented with $5,000 following their great efforts in creating software solutions that embody Pervasive Security and utilize TCG standards. They have also been invited to present their comments to TCG’s Storage Work Group.

The industry relies on collaboration and unification of different sectors to constantly innovate and find new solutions that enable security. Coming together to learn and educate each other is how the industry will continue to evolve, and no one company or person can do it alone.


Black woman working on computer, engineering, CodeGen Developer Challenge

Calling all security innovators! TCG are inviting you to participate in their CodeGen Developer Challenge

Black woman working on computer, engineering

Calling all security innovators! TCG are inviting you to participate in their CodeGen Developer Challenge.

The week-long event, taking place 18-22 October 2021, will ask developers to create a functional prototype built off a TCG standard.

The challenge will provide an opportunity for brilliant talents to create their works with the help of TCG mentors, who will be virtually available throughout the event, while also experiencing the unforgettable thrill of coming together with peers who share the same passion for digital technology and innovation. Competing developers have the chance to win up to US$5,000.

The theme of the challenge will be “Pervasive Security and Application of TCG standards in software and hardware development”. Participants will have the opportunity to create solutions that can make an impact for the security community, as well as SW and HW developers seeking to integrate security into their platforms. The challenge is open to both teams and individuals, and whoever impresses the judges most will be awarded. The event is free and open to non-TCG members only, as well as individuals from TCG member companies who have not had an active member login to the technical Work Groups.

Registration for Trusted Computing Group (TCG)’s Virtual CodeGen Developer Challenge is open now!

Registration deadline for the challenge is Monday, October 11, 2021.

REGISTER HERE

For more information on how to get involved, please visit the TCG website. An overview video about participation and the prizes that are up for grabs is also available on YouTube.

TCG CodeGen Developer Challenge