I have used OpenEmbedded/Yocto, but it pretty much falls under "roll your own solution" category. I know there are many projects and papers written that try to

I have used OpenEmbedded/Yocto, but it pretty much falls under "roll your own solution" category. I know there are many projects and papers written that try to address IoT security, but there's no clear leaders yet. Making hardware projects might span to few years, you can't simply grab something from GitHub, base your project on it and risk it going out of existence in few months.