Embedded Security: The Not So Secret Problem Facing Embedded Device Development
•
1 like•910 views
Security is the top of mind issue at many engineering organizations. Not only are more and more devices becoming connected, but their software functionality represents more value to end users and, in many cases, its compromise or failure can result can significant financial liabilities for OEMs. During this QuickCast, VDC's Chris Rommel focuses on one of the leading trends influencing the embedded market - the growing threat of security breaches.
Recommended
Recommended
More Related Content
Viewers also liked
More from VDC Research Group
More from VDC Research Group (14)
Recently uploaded
Recently uploaded (20)
Embedded Security: The Not So Secret Problem Facing Embedded Device Development
- 1. Embedded Software & Tools Practice Christopher Rommel – Vice President Steve Balacco – Practice Director Jared Weiner – Analyst QuickCast Embedded Security December 2011 The Not So Secret Problem Facing Embedded Device Development © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 2. Recording Available A full audio recording is available for download at: http://vdcresearch.com/market_research/embedded_software/freeresearch.aspx © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 3. About Us Market Intelligence for Technology Vendors & Investors Direct-Contact Primary Market Research Deeply Segmented Data Expert Insights Validated Results Custom Consulting Services for Your Most Critical Business Decisions Research-Based Consulting Transparent Tools & Methodology o Highly Customized Survey Guides & Output Templates o Sophisticated Market Estimate & Forecast Models o Detailed, Flexible Stakeholder Maps & Profiles o Industry Development Scenarios o Market Opportunity Fit Screening, Rating & Ranking © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 4. Our Core Coverage Areas AutoID & Transaction Automation Embedded Hardware & Systems Mobile & Wireless Industrial Automation & Control Embedded Software & Tools Emerging Technologies © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 5. Ways to Work With Us Our syndicated research is the basis for the many ways VDC can help you grow your business. We offer a wide variety of services designed to meet specific tactical and strategic decision support needs. All of our services are built on a foundation of highly skilled professionals applying robust methodologies to VDC’s large and continuously refreshed datasets. © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 6. Today’s Speaker Chris Rommel Vice President, Embedded Software & Hardware Chris is responsible for syndicated research and consulting engagements focused on embedded software, hardware, and development solutions. He has worked with wide variety of clients supporting a range of projects including competitive analyses, strategic marketing initiative support, ecosystem development strategies, and vertical market opportunity assessments. Chris’s prior research also includes studies on multicore components and tools, operating systems, software development tools, and software/system lifecycle management tools, among others. Chris holds a B.A. in Business Economics and a B.A. in Public and Private Sector Organization from Brown University. For complimentary insights and marketing data: http://blog.vdcresearch.com/embedded_sw/ © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 7. Device Connectivity Forcing OEMs to Acknowledge Security Threats Inclusion of Web Component (e.g., UI, or Web Services) Is Security Important for the Device/System in Current Embedded Project & Expected Under Development? on a Similar Project in Two Years (Percent of Respondents) (Percent of Respondents) 8% 5% 39% 25% 53% Yes Current Project No 70% In Two Years Don’t know 20% 51% 29% Yes No Don't know © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 8. Mobile OEMs Demonstrating Highest Consideration of Security Issues Security IS Important for the Device/System under Development (Percent of Respondents) 100% 92% 75% 74% 75% 70% 68% 67% 65% 63% 50% 25% 0% © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 9. OEMs Already Taking Steps to Change the Status Quo Current Development Project Actions Taken to Limit Potential Security Issues (Percent of Respondents) 75% 64% 50% 36% 35% 29% 25% 22% 19% 12% 10% 8% 3% 0% No proactive actions being Selection/implementation Use of specific Use of specific Don’t know taken specific run-time software development tools to testing/analysis tools to preclude the introduction of preclude the introduction of security vulnerability security vulnerability inducing errors inducing errors Security IS Important Security NOT Important Note: Percentages sum to greater than 100% due to multiple responses. © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 10. Virtualization Offers Security Solutions Too Current and Future Use of Virtualization Run-time Software, Factors Driving Security Considerations Current Development Project for Application Security (Percent of Respondents) (Percent of Respondents) 2008 2011 27% 4% 7% Ability to easily port designs to hardware platforms 23% 20% 23% Secure partitioning of guest operating systems Ability to easily run and manage 22% multiple Oss 17% Ability to easily integrate new applications onto existing platforms 73% 73% 17% Yes Enable safety-critical certification of the underlying operating system No 16% Don't know Ability to partition application functionality over multiple processors 5% Future Development Project Ability to consolidate processors for 2008 (Percent of Respondents) 2011 potential BOM cost savings 1% Other 9% 13% 5% None of the above 37% 41% 38% Don't know 0% 25% 50% 50% 49% Note: Percentages sum to greater than 100% due to multiple responses. © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
- 11. Thank You for Attending this VDC QuickCast For more information please contact: Christopher Rommel – Vice President crommel@vdcresearch.com | 508.653.9000 x123 Stephen Balacco – Practice Director sbalacco@vdcresearch.com | 508.653.9000 x124 Jared Weiner – Analyst jweiner@vdcresearch.com | 508.653.9000 x143 Bob Perugini – Account Director rperugini@vdcresearch.com | 508.653.9000 x143 For complimentary insights and marketing data: http://blog.vdcresearch.com/embedded_sw/ © 2011 VDC Research Webcast Embedded Software & Tools vdcresearch.com
Editor's Notes
- VDC Research Group (VDC) provides exceptionally detailed direct-contact primary market research and consulting services to many of the world's largest technology suppliers, innovative start-ups and leading investors.
- The firm is organized around six practices, each with its own focused area of coverage, but all committed to the firm’s core philosophy.
- This philosophy is applied in our syndicated research and in the wide variety of other services we provide to meet our clients’ specific tactical and strategic decision support needs. All of our services are built on a foundation of highly skilled professionals applying robust methodologies to VDC’s large and continuously refreshed datasets.
- Allowing for efficient resource partitioningCreating demand for hosted services and real-time, ubiquitous information accessOur research indicates that over 50% of embedded engineers surveyed expect their projects to require some form of web connectivity within the next two years.It is this growing interconnectivity with other devices and support systems that is now forcing engineers and IT developers to take each other’s system requirements and resources into consideration for their designs.There is a clear move toward interconnectivity within the embedded market, with the percentage of engineers expecting their projects in 2 years to include web components 20% higher than current project values. As a result, more embedded engineers are being forced to consider the requirements of the IT developers who are developing the back-end systems to support the data sharing and real-time analytics empowered by next generation devices and cloud services. Although the trend toward ubiquitous connectivity will certainly continue to impact engineers going forward, the potentially more commercially salient impact of web evolution to SSLM tools vendors may be the broadening of potential adopters of SSLM tools to developers and third party organizations focused on building applications for the cloud.Additionally, we have already seen the cloud begin to impact product delivery models for other lifecycle management solutions – namely Testing-as-a-Service – although the model may prove less viable for certain SSLM solutions that do not typically require the same system resources to be run natively on host development platforms as do some testing tools. Nevertheless, there is a growing expectation within end users for this level of ubiquitous and real-time access
- As I mentioned on the previous slide, the engineering community continues to look for new solutions that can offer a means to abstract the complexity brought on by the move to multicore processors. One of the solutions that more engineering organizations are turning to is virtualization, which can allow a target device run multiple OSs over the same piece of silicon – potentially allowing organizations to more easily run existing SW assets over their legacy operating systems.As you can see from these findings from our 2011 Embedded system engineering survey, more and more engineers report that they are using virtualization in their current solution. In fact, as compared to our 2008 results, the current project use rates are up approximately 50%.The potential applications of the technology are not limited to solving multicore-related issues, however. Engineering organizations can look to this technology for a number of reasons including the ability to enhance system security, reduce bill of material costs, or even to allow the creation of multiple “profiles” that can partition enterprise and consumer assets. Whereas adoption of the technology is expected to increase going forward, it is working against a few different factors that are inhibiting its growth, first of which is just the awareness of the technology.Despite the increasingly commonplace utilization of the technology for enterprise server use cases, a majority of embedded engineers remain less than “Extremely familiar with the embedded version of the technology. Additionally, a number of engineers still report concerns about the possible impacts on their project’s complexity, real-time requirements, as well as potentially adding another SW licensing cost.That said, we anticipate that growth in the adoption and potential utility of this technology will continue going forward as more OEMs look to facilitate their transition to new hardware architectures and more device classes gain connectivity requirements that place further strain on current security mitigation strategies
- If you have questions about this webcast, our research, or any other topics within the world of embedded software and tools technologies, please do not hesitate to contact us.Thank you for joining us today!