IoT, Embedded and Hardware Security
Firmware Security Analysis
We extract your device's firmware and analyze its contents. We identify embedded passwords, keys and outdated third-party components.
What it is
Firmware is the software running on the device. Analysis starts by extracting the firmware from the device or an update package. The file system is opened, third-party components and their versions are listed, and embedded passwords, keys and certificates are searched. Outdated components with known vulnerabilities are identified.
Scope
- Firmware extraction from the device or update package
- File system and configuration file examination
- Listing third-party components and their versions
- Searching for embedded passwords, keys and certificates
- Identifying outdated components with known vulnerabilities
The need
When organizations need it
- Before the final firmware revision is approved for mass production.
- When your product is entering the EU market and you need to demonstrate compliance with the Cyber Resilience Act.
- When an inventory of the open-source components in a device is requested.
Method
How we work
-
Extraction
We extract the firmware from the device or update package and open the file system.
-
Review
We list third-party components and their versions and search for embedded passwords and keys.
-
Matching
We match outdated components to known vulnerabilities and prioritize them.
Outcome
What you have at the end
You receive an inventory of third-party components in the firmware, a list of embedded passwords and keys, and a prioritized list of components with known vulnerabilities. A software bill of materials (SBOM) for compliance is also provided.
Frequently asked questions
We cannot provide the firmware. Can this still work?
In most cases, we can extract the firmware from the device or update process. Source code is not required.
What is an SBOM and why is it important?
An SBOM is a machine-readable list of the software components in a product. When a new vulnerability emerges, it lets you quickly see which products are affected.
IoT, Embedded and Hardware Security
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting