DEF CON 33 Video Team - Torvik from Tulip Tree Tech
Source: YouTube · DEFCONConference · published Aug 18, 2025 · 33:19
Torvvic, founder of Tulip Tree Technology, explains how to make embedded devices more secure by working directly with manufacturers rather than approaching security as a separate concern 0:47-1:07.
Key Takeaways:
• Manufacturers prioritize time-to-market and cost over security, so security must address their actual business pressures 3:08
• Security should be integrated early in development rather than added at the end, like "Ford trying to fix cars in the parking lot" 7:59
• Using fuzzing and non-deterministic testing helps find bugs early when they're cheaper to fix 13:02
• Security professionals need to meet manufacturers where they are, understanding their constraints and processes 30:30
The key to device security is reframing it as quality assurance and reliability, which aligns with manufacturers' goals rather than presenting it as an additional security burden.
Sources:
- 0:47-1:07 Introduction of Tulip Tree Technology and their mission
- 3:08 Discussion of why manufacturers don't prioritize security
- 7:59 Analogy about fixing security issues after manufacturing
- 13:02 Explanation of non-deterministic testing and fuzzing
- 30:30 Advice for security professionals working with manufacturers
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Thanks for joining us. Thanks for watching. And as always, hack on. >> Hack on. >> Sweet. >> Wait one second. Do you want to do the front roll where we ask him who he is and what his company is? >> I don't think we ever mentioned Tulum Tree. >> We We can if you would like. >> We We probably should do that. What a great idea I've just had. How about we introduce Torvvic in what in the world he actually does at the beginning of this video. Awesome. Well, Torv, you're you're on the couch. We just had an awesome conversation. It's probably about that time where we actually hear who you are, >> where you work for, and we'll definitely throw this at the video. Brilliant idea I've just had. >> Yeah, just cut it in, man. All right. Hi, I'm Torvik. Um, I'm the founder of Tupree Technology. I got my…