Winners of the first ever TCG CodeGen Developer Challenge have been crowned

Trusted Computing Group (TCG) logo

Leonardo DRZ have been crowned as the first ever winner of TCG CodeGen Developer Challenge.

The CodeGen Developer Challenge brought together developers from across the industry to participate in the event and create software solutions that embodied the theme, “Pervasive Security and Application of TCG standards in software and hardware development”. The winning team consisted of Njegos Nincic and Jeff Morgan from Leonardo DRZ, who developed two possible solutions to secure the software booting process.

The week-long CodeGen Developer Challenge provided an opportunity for brilliant talents to create a functional prototype built off a TCG standard. Bringing together peers who share the same passion for digital technology and innovation, each team was given a dedicated TCG mentor who was on hand virtually throughout the event.

With the cyber skills shortage and training gap being a prominent issue in the industry, the CodeGen Developer Challenge helped to unite people in learning, exploring, and developing new software designs.

The winning innovation

The winning team developed two possible solutions to add an extra layer of security when verifying the state of data storage. One solution used existing TCG technologies, such as Opal and the TPM, while the other was a potential extension to the TCG Storage Core specification.

Firmware/software corruption mitigation has become increasingly important in both commercial and military applications. Permanent Denial of Service attacks are an increasing concern in these sectors, as they render the system unbootable. A UEFI Secure Boot enabled system will fail to boot if the bootloader is altered or compromised, which is why verification and authentication are so important with the threat of cyberattacks growing in frequency and complexity.

The winner’s system can help a wide range of applications beyond the commercial and military sectors. Using TCG technologies, an extra security protocol is added to check and recover the storage of data. For the potential extension of the TCG Opal SSC specification Nincic and Morgan suggested adding two new commands: Setup Recovery and Toggle Recovery. These commands would add another process to help measure data and enable recovery of the system if needed. This ensures stricter security authentication protocols suitable for critical applications that need additional protection and the extra confidence in secure confidential data.

Industry collaboration

The winners were presented with $5,000 following their great efforts in creating software solutions that embody Pervasive Security and utilize TCG standards. They have also been invited to present their comments to TCG’s Storage Work Group.

The industry relies on collaboration and unification of different sectors to constantly innovate and find new solutions that enable security. Coming together to learn and educate each other is how the industry will continue to evolve, and no one company or person can do it alone.

TCG Virtual CodeGen Developer challenge featured

Recommended Event: 18/10/2021-22/10/2021: TCG Virtual CodeGen Developer Challenge

TCG Virtual CodeGen Developer challenge

Trusted Computing Group is proud to announce our first ever TCG Virtual CodeGen Developer Challenge!

This week long event will ask developers to create a functional prototype built off a TCG standard. The challenge will provide an opportunity for brilliant talents to create their works with the help of TCG mentors, who will be virtually available throughout the event, while also experiencing the unforgettable thrill of coming together with peers who share the same passion for digital technology and innovation.

The theme of the challenge will be “Pervasive Security and Application of TCG standards in SW and HW development”. Participants will have the opportunity to create solutions that can make an impact for the security community as well as SW and HW developers seeking to integrate security into their platforms. The challenge is open to both teams and individuals, and whoever impress the judges most will be awarded. The event will be free and open to non-members as well as individuals from TCG member companies who have not had an active member login to the TCG technical Work Groups.

Registration deadline: Monday, October 11, 2021
The CodeGen Developer Challenge will run from October 18October 22, 2021.
All questions can be directed to [email protected].

Cyber Security

The importance of women in cybersecurity for innovation, investment and enrichment

By Stephanie Schultz, Executive Director at Trusted Computing Group

Cyber SecurityAccording to Small Business Trends, 2018 saw 20 percent of all jobs in technology held by women.

Of those companies in the Fortune 500 with three or more women in leading positions 66 percent saw an increase in ROI, found Women Who Tech. Since then, as we fly through 2020 into the new decade, women are becoming an ever-more prevalent and disruptive force within the tech market – particularly cybersecurity. In almost seven years I have worked in the cybersecurity sector with Trusted Computing Group (TCG), I have witnessed first-hand the enrichment their work has brought to the perspective of the industry, and how this has diversified its strategies for a more successful industry position.

Inclusion Sparks Insight

In my experience, women – though a minority in the technology sphere – have been leaders in the development of the industry. This success in leadership positions stems from the unique and refreshing perspectives brought by women to problem solving and identifying gaps in the market and demand within the industry. Being so deep in the technology we work on, it is easy to lose sight of who will ultimately benefit from it; the consumer. End users are the ones shopping, buying our devices and engaging in the community and a huge portion of this behavioral demographic are women.

Similarly, women engage with things differently in the ways they utilize and perceive things, such as IoT home devices where data is stored. As gender norms merge and more men adopt activities which used to be women-centric, understanding and implementing these perceptions is becoming more valuable. It is beneficial to understand consumer behaviors complimentary to and beyond a male-centric space, making gender diversity a key element to improving development, marketing and design strategies, creating well-rounded solutions and exceling in the market.

Within TCG, our male colleagues have nothing but the utmost respect for the women in the organization because it is recognized that they are good at what they do. Even among lively debates between parties in the conference room, I have never seen anyone brush off or dismiss or demean anything the female leaders have to say – it is always very mutually respectful, and we have an appreciation for one another. Being a member organization, I believe, allows for more diversity, welcoming a broad range of professionals from their member companies. This level of diverse collaboration, especially on the formation of global security standards, can only strengthen the quality of the work we do, and I am proud to manage and contribute to this.

Securing the Future

My role in TCG is largely engaging with the Board’s strategic direction. Beyond daily billing and legal admin, it is important to keep track of current technology trends and how they are progressing. Without considering the future of the industry and only focusing on the present, emerging opportunities will be missed – every device security aspect the consumer becomes aware of should have been considered by cybersecurity professionals five years in advance. In that respect, I facilitate the board to think about the direction of the organization for the future, collaborating with global government entities to ensure their perspective is also considered and their specialist security requirements of confidentiality are met. From the viewpoint of a woman in the organization, I work directly and regularly with other senior role women, from Work Group chairs to editors, to ensure that work from every division is promoted and driven towards a marketing angle. In doing so, my goal is to encourage everyone to follow through with their work beyond the technical development stage to present it in a usable and consumable way, reaching those beyond the cybersecurity sphere to increase TCG’s impact, reach and opportunities.

Despite my experience in my field, I am still committed to educating myself further so that I can offer my best to my organization. I am currently studying for my Master’s in Business Administration, with a focus on globalization, leadership and management. These are topics that will never sunset and are valuable to ensuring that security is prioritized and acknowledged by the rest of the technology industry. There are a lot of product developments and start-ups where security is, understandably, not a key concern due to the extra costs and likelihood of attack. Most companies don’t consider the resilience of their device security until it’s too late, but I want to change this. In progressing my professional development through the means of education, I want to drive cybersecurity to become a constant, standard practice in company product development from my position with TCG. As technology advances and ever changes, so will attacks – I want to see cybersecurity at the forefront of the industry, readily implemented to alleviate consumer concern.

To achieve this, it is crucial that we adopt as diverse a range of perspectives and ways of thinking as possible, to connect with as many surrounding sectors as we can and emphasize our value in ways that resonate with them. Women are an integral part of this strategy and must be seen as such in the path to encouraging this growth. As more female voices are highlighted in TCG and its member companies, making women more visible and the growth made evident internally, we hope to encourage female engineers who are interested in cybersecurity to join the work we are doing. TCG has been around for 20 years, and during this we have learned that building a force of diverse, new and younger talent in this way is key to keeping the mission alive and ensuring the success of businesses now and into the future.

About the author

Stephanie SchultzStephanie Schultz started her career industry association consulting and management working with homecare and hospice providers at the state and federal level to influence and advise policy makers on regulations and procedures to expand access to care. Her experience in advocating for and managing industry groups made moving into the world of cybersecurity standards a good fit. Stephanie joined TCG to provide administrative and specification development support and started representing TCG in the marketing efforts. Stephanie joined the Board of Directors assisting with the development and implementation of strategic efforts, relationship building and team management. She is currently an MBA student at the University of Illinois Urbana Champaign.

WeAreTechWomen covers the latest female centric news stories from around the world, focusing on women in technology, careers and current affairs. You can find all the latest gender news here

Don’t forget, you can also follow us via our social media channels for the latest up-to-date gender news. Click to follow us on Twitter, Facebook and YouTube