Lecture

3.6 Meeting the cybersecurity needs of embedded systems

  • 14.11.2024 at 11:40 - 12:00
  • Future Control Stage (C5.259)Software & Linux
  • Language: English
  • Type: Lecture

Lecture description

This talk addresses the growing complexity of embedded systems and the critical need for secure, reliable software. Traditional cybersecurity testing methods, often conducted late in the development cycle, struggle to keep pace. This talk explores how formal methods, integrated with advanced analysis tools, empower C/C++ developers to: 
Proactively address vulnerabilities: Formal methods and abstract interpretation techniques identify potential weaknesses early in the development process, reducing the reliance on penetration and fuzz testing in later stages. 
Streamline development: By focusing on bugs that matter, with close to no false positive and catching flaws earlier, the need for rework and retesting is minimized, leading to faster development cycles, improved efficiency and cost savings. 
Enhance software dependability: Combining static analysis using abstract interpretation with full context sensitivity, with hardware memory awareness allows for a more comprehensive understanding of potential vulnerabilities, leading to more dependable and secure software. 
This approach aligns with industry best practices (e.g. NIST SP 800-53) and empowers C/C++developers to deliver robust, secure embedded systems that meet the demands of today's and tomorrow's applications.  
We will illustrate this approach with the TrustInSoft analyzer to show how it accelerates verification for complex cases, reduces user fatigue, improves developer efficiency, cost-effectiveness, and software cybersecurity. In summary, integrating formal methods and sound Analyzer enhances software reliability and cybersecurity, streamlining development in an increasingly complex environment.

Speaker

Further lectures