Providing embedded developers with 'Security Made Simple'

Such regulatory challenges include a new Cyber Resilience Act, which was introduced in September 2022 by the European Commission and has proposed that manufacturers protect their Internet-connected electronic products from unauthorised access stages of their life cycle.

Through their 'Security Made Simple' methodology, IAR Embedded Security solutions like Embedded Trust and Secure Deploy help organisations to increase their developers’ productivity and implement security best practices with little impact on existing development processes, production, and support updates for lifecycle management.

The new Cyber Resilience Act applies to all Internet of Things and Industrial Internet of Things devices that are exposed to risks through their web connectivity: malevolent attackers may impact systems, enter IT or OT (operational technology) systems, implement ransomware, or steal critical intellectual property. The proposed act requires harmonized rules for new products or software, a framework of cybersecurity requirements governing product planning, design, development, and maintenance along the whole value chain, and an obligation to provide a duty of care for the entire product lifecycle.

IAR Systems is a founder member of the IoT Security Foundation and was substantially involved in developing the 'best practices' for securing electronics devices and connected applications, which have been adopted into regulations by the UK government (DCMS), the EU (ETSI), the US (NIST) and other nations globally. The know-how accumulated during almost a decade has been incorporated in the IAR Embedded Security product portfolio, the most robust end-to-end security development platform to simply, quickly, and robustly implementing cybersecurity and addressing regulatory challenges.

Embedded Trust and Secure Deploy, core products from the IAR Embedded Security solutions, leverage the secure hardware in microcontrollers to provide the low-level trust anchors and secure services for (I)IoT devices. The automated tools included in the platform cover multiple core security domains, including integrated identity and certificate management, scalable Secure Boot Manager, secure deployment with integrated manufacturing mastering, and release management with versioning and update infrastructure. IAR Systems complements its embedded security products with extensive training and hands-on guidance for all design and development stages.

“The IAR Embedded Security solutions incorporate our entire experience and expertise in cyber security – and we make this ‘Security Made Simple’ available for customers worldwide,” says Anders Holmberg, CTO at IAR Systems. “For our customers, the investment in security tools pays off quickly: While they can offer their end customers trustworthy products and applications with a fast time-to-market, they also better protect their R&D investments and cryptographically secure their valuable intellectual property.”

IAR Systems has summarised what embedded developers must know about the proposed new legislation in the European Union in a compact POV, which is available on the company's page here.