Summary
This technical white paper outlines the importance of secure coding practices in the development of connected embedded systems. It describes the challenges posed by increased connectivity, which introduces additional vulnerabilities that must be addressed through a multi-layered security approach. The document emphasizes the necessity of integrating security into the software development life cycle, particularly through the adoption of DevSecOps principles, which advocate for early and continuous security considerations. It details various strategies for enhancing security, including secure boot, domain separation, and the application of secure coding standards such as MISRA C and CERT C. The paper also discusses the significance of establishing clear functional and security requirements, maintaining bidirectional traceability, and automating security testing processes. By implementing these practices, organizations can better protect their embedded systems from potential threats and ensure compliance with relevant safety standards.
