driving your security forward
By combining our world class hardware and software security expertise, security tooling, advanced training and more than 15 years of security testing, we are well equipped to assist your secure development and validate robustness of the result.
Our Security Canvas workshop is a custom module with which your development team can engage with our security analysts to define valuable assets, attacker profile, threads and attack trees. The result of the workshop is clear security guidance for your development team to embed in the solution.
We can offer an extensive range of services like review of individual components (SOC, ECU microcontroller, etc), communication protocols and automotive network design in terms of attack surface, secure boot, cryptographic functionality, robustness of countermeasures, review of TEE/OS, and so on.
Adding security features alone won’t make a solution secure. We can participate from the development process onwards with threat modeling, secure design as well as testing and verification along the development path.
We have over a decade of experience of testing for hardware level attacks with the aim to extract firmware. Our analysts will be able to confirm the risk level associated with your solution.
Riscure has supported several industries who have extensive experience with secure communication protocols, including secure OTA updating. We will not only review the design, but also effectively test for cryptograhpic robustness.
While testing for logical attack paths is very important... do not underestimate how a hardware attack can extract firmware from a control unit to create a "white box" and from there trigger scaleable logical attacks much more easily. Firmware protection is not only IP protection, but also prevents an easy path to logical attacks.
