ACCESS Newswire
29 May 2020, 23:55 GMT+10
Offloading BSP maintenance frees development teams to accelerate time-to-market for new devices, build richer feature-sets for more competitive products
PITTSBURGH, PA / ACCESSWIRE / May 29, 2020 / Timesys Corporation (https://www.timesys.com), an industry pioneer and a leading provider of embedded, open-source software, engineering services, and security solutions, today announced a new collaboration with NXP® Semiconductors to jointly offer a turnkey BSP Lifecycle Maintenance Service for embedded Linux that offloads updates and security tasks for embedded system device developers.
BSP (Board Support Package) maintenance is typically a largely manual, complex process that consumes development team time and attention, especially when using Yocto Project BSPs. But if BSPs are not maintained consistently, embedded system products will be exposed to vulnerabilities and exploits and will not contain the most up-to-date software.
With the BSP Lifecycle Maintenance Service, a development organization can offload software maintenance tasks of monitoring and triaging vulnerabilities and updating and patching software to improve security that typically consumes an entire team's capacity. Instead, teams can now focus on accelerating new product development for faster time-to-market.
'Security of your devices can no longer be ensured by scheduling a single review to be performed at the end of your device development,' said Atul Bansal, CEO of Timesys. 'Instead, you need to ensure that your BSP software components are based on up-to-date versions, that they include all relevant security patches, and that you are accurately tracking all vulnerabilities that affect them. Our BSP maintenance service makes this simple and turnkey for your team. It means you can make security ‘stretch right' in the software development lifecycle process, maintaining strong product security after release and throughout the product production lifetime.'
The NXP BSP Lifecycle Maintenance service will be featured in a June 2 webinar hosted by NXP and Timesys: Full Life Cycle Security Maintenance of Embedded Linux BSPs
The service, offered in conjunction with Timesys, provides:
'NXP recognizes that development teams using our i.MX and Layerscape® processors want to bring products to market and maintain the software in the most efficient way possible,' said Rob Oshana, vice president of software engineering in the edge processing business at NXP. 'The BSP Lifecycle Maintenance Service offered in conjunction with Timesys enables embedded system products to stay up-to-date throughout their product lifecycles without eating into new product development cycles.'
More than 300 new vulnerabilities affecting software systems are disclosed every week by services such as the National Vulnerability Database (NVD) that reports Common Vulnerabilities and Exposures (CVEs).
The included Vigiles Prime service will analyze BSP software to automatically generate a Software Bill of Materials (SBOM) for Yocto, Buildroot, and Timesys Factory projects. The service then filters the many CVEs, identifying those that affect a specific product's open-source components. Vigiles simplifies CVE detection and mitigation with developer team collaboration tools that simplify analyzing, tracking, and mitigating CVEs to enable products that are more secure by design and will stay secure after release.
Vigiles filters CVEs based on a project's Linux kernel configuration and U-Boot configuration, which eliminates CVEs based on features not being used. This reduces CVE investigation and triage tasks by 75 percent on average based on usage data compiled by Timesys.
The security maintenance tools and BSP update monitoring, management and testing automate key steps in software maintenance, enabling device developers to reduce the overall risk of security problems for their product lines. Developers gain a more accurate understanding of a device's exposure to vulnerabilities and they can accelerate vulnerability mitigation to cut the risk of a customer security breach.
About Timesys
Timesys is a pioneer and industry leader in open source software security, development tools, and engineering services spanning the embedded software market. With Timesys' expertise, OEMs, ODMs, and design houses cut development costs and accelerate time-to-market for BSPs and devices, HMI / UX, security, and IoT systems and applications using embedded Linux, Android, FreeRTOS and other open source solutions. Timesys offers a complete end-to-end device security solution enabling developers to implement security early in the design and to maintain strong security throughout product lifecycles with Vigiles, an on-demand vulnerability monitoring, and management service. Representing more than 20 years of embedded development experience, Timesys' broad portfolio, embedded expertise, and extensive partner ecosystem are used by 1000+ projects to develop leading products and applications including medical, industrial, networking, aerospace, and consumer solutions. For more information, visit www.timesys.com. Find Timesys on YouTube, Twitter, LinkedIn, and Facebook.
Timesys Press Contact
Theresa Kisha
+1.412.325.6362
[email protected]
Timesys, the Timesys logo, and Vigiles are trademarks or registered trademarks of Timesys Corporation.
Android is a trademark of Google Inc.
Linux is a registered trademark of Linus Torvalds in the United States and other countries.
All other company and product names mentioned are trademarks and/or registered trademarks of their respective owners.
SOURCE: Timesys
Get a daily dose of Atlanta Leader news through our daily email, its complimentary and keeps you fully up to date with world and business news as well.
Publish news of your business, community or sports group, personnel appointments, major event and more by submitting a news release to Atlanta Leader.
More InformationISTANBUL/PARIS/BRUSSELS: As searing temperatures blanket much of Europe, wildfires are erupting and evacuation orders are being issued...
VENICE, Italy: Over the weekend, hundreds of protesters marched through the narrow streets of Venice to voice their opposition to billionaire...
PARIS, France: France is taking stronger steps to reduce smoking. A new health rule announced on Saturday will soon ban smoking in...
WASHINGTON, DC - U.S. President Donald Trump on Tuesday claimed Elon Musk's success has been built on government subsidies. Without...
EVERGLADES, Florida: Over the weekend, a diverse coalition of environmental activists, Native American leaders, and residents gathered...
BEIJING, China: China's national soccer team may struggle to stir excitement, but its humanoid robots are drawing cheers — and not...
NEW YORK, New York - U.S. stocks diverged on Wednesday for the second day in a row. The Standard and Poor's 500 hit a new all-time...
NEW YORK CITY, New York: The U.S. dollar continues to lose ground, weighed down by growing concerns over Washington's fiscal outlook...
KABUL, Afghanistan: Afghanistan, long associated with war and instability, is quietly trying to rebrand itself as a destination for...
SANTA CLARA, California: Executives at Nvidia have quietly been cashing in on the AI frenzy. According to a report by the Financial...
NEW YORK, New York - Global stock indices closed with divergent performances on Tuesday, as investors weighed corporate earnings, central...
TORONTO, Canada: Canadian Prime Minister Mark Carney announced late on June 29 that trade negotiations with the U.S. have recommenced...