The contrasting urgency and importance of security and privacy in the consumer and industrial world can be shown in the simple example of an automobile with advanced assisted driving capabilities.
Inadequate protection for user privacy could mean that an unauthorised third party could snoop on a log of the car's journeys as the data is in transit between the vehicle and, for example, the driver’s insurer. This might feel intrusive, but usually it will have no important consequences for the driver.
Inadequate security protection, on the other hand, could allow a malicious actor to take over or corrupt the vehicle’s driver assistance system, compromising the driver’s ability to maintain safe operation.
The conclusion seems cut-and-dried: privacy protection is a nice to-have, but security protection is a must-have.
Except this is not really true, for at least two reasons.
First off, just because an instance of a breach of privacy might not have important safety consequences does not mean that it is not harmful. If a consumer, when buying a car, does not have the clear and explicit understanding that personal data, such as the routes and times of their journeys, their driving style and so on, risk falling into the wrong hands, then the car maker should be under a duty to keep them private. The same should go for any other connected device. After all, no one likes the feeling that they are being spied on.
Secondly, in other settings than a consumer’s car, a breach of privacy can have extremely serious consequences. This is even more true of industrial or commercial systems than of consumer products.
Take, for example, the control system of an energy generation plant which could send data about its spare generation capacity over the energy company’s network. This private information could be commercially valuable to competitors. It could even be used by malicious actors to time a cyber-attack on a nation’s power grid to cause maximum harm or inconvenience.
Keeping it clean: the value of data sanitation
So, OEMs have at least a moral duty to protect privacy as much as security. And in fact, the basic principles of data privacy are straightforward. If security protection is about keeping people out of an embedded device, privacy protection safeguards the data inside the device.
This means:
- Collecting and storing no more data than is necessary for the device to perform its functions
- Anonymising the data that are collected or stored
- Encrypting data at rest and before transmission
This can be thought of as data sanitation: cleaning up data stores and eliminating the accumulation of ‘waste’, or unnecessary data, to reduce the size of the attack surface open to malicious actors.
Privacy protection features built into the FoundriesFactory platform
OEMs could be forgiven for feeling weary about the concept of privacy. After all, is not it just one more thing to implement, on top of security, which is already a big enough task?
In fact, when it comes to delivering privacy protection features, they can be surprisingly easy to add with little overhead.
Users of the FoundriesFactory platform, for example, already benefit from a set of features which support security best practices and the latest regulations such as the European Union’s Cyber Resilience Act. Secure boot, CVE readiness, security focused over-the-air updates and more are integral parts of the FoundriesFactory development and device management flow.
And it is a straightforward process to activate specific privacy features in the platform alongside the security-focused features. For example, the Linux microPlatform (LmP) operating system, which underpins the FoundriesFactory platform, can be configured to implement memory randomisation in the Linux kernel.
If a hostile actor were to breach a device’s security protection, the easiest way to inspect the data on the device would be to study the processor’s memory. The LmP uses features in the Linux kernel to break up sequences of data stored in this memory into chunks, and then to randomise the locations in which the chunks are stored, making it difficult for a third party to recombine the data into their original sequence.
Other features supported in the FoundriesFactory system provide additional privacy protections: customer support engineers can provide comprehensive information to customers and training in the way to take advantage of them.
So, the take-away for customers is: if security is important, so is privacy. But tools that support privacy protection are present in platforms, such as those supported by FoundriesFactory, that will enable management of embedded device security.
