Why Embedded System Security is the New Safety Standard
Since embedded systems become more and more accessible, the demand for security in embedded software development is growing.
In contrast to safety, the focus of security is not on the risk of the coincidence of events or deviations from the intended function, but on the defence against active attacks on the embedded system.
If a system is accessible via the Internet, there can be no safety without security: If an attacker can at least partially take control of the embedded system, the safety of the system is at stake in addition to possible economic losses.
Axivion Suite supports Static Application Security Testing (SAST) with coding guidelines for CERT C and CERT C++, for C Secure Coding as well as for CWE (Common Weakness Enumeration).
With the architecture analysis, you can monitor compliance with your software architecture. Security aspects can additionally be modelled in security architectures. The architecture analysis of Axivion Suite also ensures compliance with the security architecture and it warns of violations.
Axivion Suite is available both on the developer’s workstation and in the CI / DevOps pipeline on the build server or in the cloud. This makes Axivion Suite part of your CI/CD strategy and quality assurance.
