A blog by Oleg Shilovitsky
Information & Comments about Engineering and Manufacturing Software

The importance of software BOM for hardware security

The importance of software BOM for hardware security
Oleg
Oleg
27 January, 2015 | 3 min for reading

smart-products-bom

We live in the era of smart products. Modern smartphones is a good confirmation to that. The average person today keeps in his pocket a computer with computational capability equal or even more than computer that aerospace and defense industry used for navigation. In addition to that, you smartphone has communication capability (Wi-Fi and Bluetooth) which makes it even more powerful. If you think about cost and availability of boards like raspberry pi and Arduino, you can understand why and how it revolutionize many products these days. Although, wide spread of these devices has drawbacks.

Smart products are bringing a new level of complexity everywhere. It starts from  engineering and manufacturing where you need to deal with complex multidisciplinary issues related to combination of mechanical, electronic and software pieces. The last one is a critical addition to product information. Bill of materials has to cover not only mechanical and electronic parts, but also software elements.

Another aspect is related to operation of all smart products. Because of connectivity aspects of products, the operation is required to deal with software, data and other elements that can easy turn your manufacturing company into web operational facility with servers, databases, etc.

As soon as devices are exposed to software, the problem of software component traceability is getting critical. Configuration management and updates is a starting point. But, it quickly coming down to security, which is very critical today.

GCN article – How secure are your open-source based systems?  speaks about problem of security in open source software. Here is my favorite passage:

According to Gartner, 95 percent of all mainstream IT organizations will leverage some element of open source software – directly or indirectly – within their mission-critical IT systems in 2015. And in an analysis of more than 5,300 enterprise applications uploaded to its platform in the fall of 2014, Veracode, a security firm that runs a cloud-based vulnerability scanning service, found that third-party components introduce an average of 24 known vulnerabilities into each web application.

To address this escalating risk in the software supply chain, industry groups such as The Open Web Application Security Project, PCI Security Standards Council and Financial Services Information Sharing and Analysis Center now require explicit policies and controls to govern the use of components.

Smart products are also leveraging open source software. The security of connected devices and smart product is a serious problem to handle. Which brings me to think about how hardware manufacturing companies can trace software elements and protect their products from a potential vulnerability.

What is my conclusion? To cover all aspects of product information including software becomes absolutely important. For many manufacturing companies the information about mechanical, electronic and software components is siloed in different data management systems. In my 2015 PLM trends article, I mentioned the importance of new tools capable to manage multidisciplinary product information. Software BOM security is just one example of the trend. The demand to provide systems able to handle all aspect of product BOM is increasing. Just my thoughts…

Best, Oleg

photo credit: JulianBleecker via photopin cc

Recent Posts

Also on BeyondPLM

4 6
3 January, 2013

It is always interesting to take a look and see what posts drove the most attention of my readers in...

27 March, 2013

The conversation about social software is getting more mature these days. Do you remember early period of “social software” talks....

7 October, 2014

Processes and workflows is a big topic in PLM. If you think about PLM as a way to manage a...

11 February, 2009

Directly from SolidWorks World   In my previous posts, I discussed the technological possibility of leveraging the social platform capability...

30 September, 2017

Almost 2 years ago I asked a question – How many PDM systems SOLIDWORKS users need? I counted five PDM systems....

25 February, 2011

CAD and PLM world is extremely competitive. The decision process in the manufacturing industry is not fast. Companies are spending...

5 February, 2016

The time when you product was a piece of machinery is over. These days, every product is a combination of...

6 December, 2016

At the beginning, PLM was a toolkit that was literally customized and build for a specific (usually large) manufacturing company....

21 September, 2009

As it looks like, the first public results about CAD applications running from cloud are coming from Autodesk. My attention...

Blogroll

To the top