A blog by Oleg Shilovitsky
Information & Comments about Engineering and Manufacturing Software

The importance of software BOM for hardware security

The importance of software BOM for hardware security
Oleg
Oleg
27 January, 2015 | 3 min for reading

smart-products-bom

We live in the era of smart products. Modern smartphones is a good confirmation to that. The average person today keeps in his pocket a computer with computational capability equal or even more than computer that aerospace and defense industry used for navigation. In addition to that, you smartphone has communication capability (Wi-Fi and Bluetooth) which makes it even more powerful. If you think about cost and availability of boards like raspberry pi and Arduino, you can understand why and how it revolutionize many products these days. Although, wide spread of these devices has drawbacks.

Smart products are bringing a new level of complexity everywhere. It starts from  engineering and manufacturing where you need to deal with complex multidisciplinary issues related to combination of mechanical, electronic and software pieces. The last one is a critical addition to product information. Bill of materials has to cover not only mechanical and electronic parts, but also software elements.

Another aspect is related to operation of all smart products. Because of connectivity aspects of products, the operation is required to deal with software, data and other elements that can easy turn your manufacturing company into web operational facility with servers, databases, etc.

As soon as devices are exposed to software, the problem of software component traceability is getting critical. Configuration management and updates is a starting point. But, it quickly coming down to security, which is very critical today.

GCN article – How secure are your open-source based systems?  speaks about problem of security in open source software. Here is my favorite passage:

According to Gartner, 95 percent of all mainstream IT organizations will leverage some element of open source software – directly or indirectly – within their mission-critical IT systems in 2015. And in an analysis of more than 5,300 enterprise applications uploaded to its platform in the fall of 2014, Veracode, a security firm that runs a cloud-based vulnerability scanning service, found that third-party components introduce an average of 24 known vulnerabilities into each web application.

To address this escalating risk in the software supply chain, industry groups such as The Open Web Application Security Project, PCI Security Standards Council and Financial Services Information Sharing and Analysis Center now require explicit policies and controls to govern the use of components.

Smart products are also leveraging open source software. The security of connected devices and smart product is a serious problem to handle. Which brings me to think about how hardware manufacturing companies can trace software elements and protect their products from a potential vulnerability.

What is my conclusion? To cover all aspects of product information including software becomes absolutely important. For many manufacturing companies the information about mechanical, electronic and software components is siloed in different data management systems. In my 2015 PLM trends article, I mentioned the importance of new tools capable to manage multidisciplinary product information. Software BOM security is just one example of the trend. The demand to provide systems able to handle all aspect of product BOM is increasing. Just my thoughts…

Best, Oleg

photo credit: JulianBleecker via photopin cc

Recent Posts

Also on BeyondPLM

4 6
12 November, 2014

User experience is in focus these days. Slowly, but surely enterprise software companies are coming to the point of understanding...

26 November, 2012

Experience. This word is getting into our lexicon and we start using it often. It is a nice word. We...

17 April, 2022

PLM Events are coming back! After more than two years of virtual events, the industry seems to be coming back...

30 December, 2008

Before we put something on a cloud, let’s think how we can take it off… and I really think this...

30 September, 2015

I started a series of articles explaining how hardware startups can establish a product lifecycle management strategy and why it...

9 March, 2017

PLM companies are in full swing adopting IoT technologies and marketing language. And one of the most of important element...

27 June, 2019

I grew up in the Soviet Union at the time when the planet was going through The Soviet-American Arms Race,...

16 May, 2013

Enterprise software is a fascinating place these days. It comes in a different angles and perspective. The disruption of consumer...

26 October, 2012

One interesting trend that I captured during my stay at PLM Innovation conference these days was about “information” word. It...

Blogroll

To the top