Wind River buys embedded security specialist Star Lab

By Nick Flaherty www.flaherty.co.uk

Highlighting the vital importance of security in embedded systems, Wind River has acquired a US company that specialises in software for Linux cybersecurity and anti-tamper, virtualization, and cyber resiliency.

Star Lab has developed a system protection and anti-tamper toolset for Linux, a secure open source-based hypervisor, and a secure boot solution: 

• Security Suite: The suite offers robust Linux cybersecurity and anti-tamper capabilities for operationally-deployed Linux systems and distributions.
• Embedded Hypervisor: Designed specifically for use in open, hostile computing environments, the Xen-based hypervisor offers a secure open source virtualization solution for embedded mission systems.
• Secure Boot: A measured-boot solution ensures that firmware and boot code is legitimate and has not been maliciously modified or manipulated.

Historically, embedded devices have functioned in isolation, deployed to environments minimally connected to the outside world. However, with the emergence of ubiquitous connectivity paradigms such as IoT and remotely monitored/autonomously controlled industrial and transportation systems, today's cyber threat landscape is rapidly evolving. Central to this evolution is the ease with which a focused and resourced adversary can acquire and reverse engineer deployed embedded systems. In addition to modification or subversion of a single specific device, hands-on physical access also aids an attacker in discovery of remotely-triggerable software vulnerabilities.

"The Star Lab offering is a perfect complement and extension to the Wind River portfolio, and addresses a growing trend where Linux cybersecurity and anti-tamper capabilities are becoming a requirement across industries such as aerospace, automotive, defense, and industrial," said Jim Douglas, president and CEO of Wind River. "Our customers want to create security-based differentiation in their product lines using a multi-layer security approach; by combining the security- and Linux-related strengths of both companies, we believe we will be able to deliver immediate increased value and a competitive advantage."

The Star Lab software is developed with a secure-by-design engineering philosophy, leveraging design patterns that reduce attack surface, isolate critical functionality and contain or mitigate even successful attacks. Its products, which are conformant with NIST 800-53 technical controls for US federal information systems and consistently pass independent verification/validation testing.#

"With advances in technology far outpacing corresponding advances in security, the Star Lab security philosophy is to assume compromise and design a system that prioritizes protectability, resiliency, and recoverability," said Irby Thompson, CEO of Star Lab. "Like Wind River, the Star Lab portfolio was launched with the sole focus of building products that are uncompromising in their ability to protect mission-critical systems. Becoming part of the Wind River family will not only strengthen our value and offerings to our current aerospace and defence clients, but also allow us to scale to new opportunities faster, as well as expand our reach into new vertical markets."

www.windriver.com