Issue link: https://read.uberflip.com/i/1542773
WHITE PAPER Software Security by Design mrcy.com 2 mrcy.com 2 Mercury is a leading software security provider dedicated to delivering security solutions for both commercial and government customers. The company tackles the most challenging cyber problems including proactive protection of the system even during sophisticated, targeted attacks. Mercury prides itself on having a strong focus of technical leadership, subject matter expertise, and a pedigree of developing creative and high-quality products and capabilities. Historically, embedded devices have functioned in isolation, deployed to environments minimally connected to the outside world. However, with the emergence of ubiquitous connectivity paradigms like Internet of Things (IoT) and remotely monitored/ autonomously controlled industrial and transportation systems, today 's cyber threat landscape is rapidly evolving. Central to this evolution is the ease with which a focused and resourced adversary can acquire and reverse engineer deployed embedded systems. In addition to modification or subversion of a single specific device, hands-on physical access also aids an attacker in discovery of remotely- triggerable software vulnerabilities. Adversaries with physical access primarily approach their reverse engineering activity in two ways: 1. Directly acquring and reverse engineering devic firmware and 2. Connectiong to a device via JTAG or other debug interface (e.g., Android's ADB or ARM's Core Sight) to observe and manipulate runtime behavior. The goal of both approaches is to bypass policy-based protections so that the device software can be accessed, reverse engineered, modified, or otherwise exploited. For example, a compromised device may have its firmware Titanium Secure Hypervisor provides a trusted execution environment that addresses concerns unique to mission-critical computing including secure boot, logical isolation, runtime integrity, technology protection, deterministic performance, and mission systems compatibility. Titanium Technology Protection offers the most robust Linux security capabilities on the market today. With the assumption that an attacker will gain root access to your system, it is specifically designed to protect critical software applications, system configurations, and data from unauthorized access, modification, reverse engineering, or theft by malicious insiders. Titanium Secure Boot provides a secure, measured boot sequence by decrypting multiboot modules on when the execution environment is configured as expected and is operating in a state of verified trust.