Software Update as a Mechanism for Resilience and Security Proceedings of a Workshop (2017) / Chapter Skim
Currently Skimming:
6 Ensuring Robust Firmware Updates
6 Ensuring Robust Firmware Updates
Pages 36-41
The Chapter Skim interface presents what we've algorithmically identified as the most significant single chunk of text within every page in the chapter.
Select key terms on the right to highlight them within pages of the chapter.
From page 36... ...
With a mission to make electric power safer, more reliable, and more economical, Whitehead described SEL as "the brains of the electric power systems." While all of the design, manufacturing, and support is done within the United States, SEL serves clients in about 160 countries, making it a global company. UNIQUE ATTRIBUTES OF SEL'S MARKET SPACE SEL makes a suite of products that are meant to work in concert to support electrical power systems.
|
From page 37... ...
Client utilities expect to use their designs for 20 years, with minimum upgrades, because once the systems are built, they are considered "done." Therefore, in general, SEL does not anticipate frequent firmware updates, although he noted that one of their devices does use a Microsoft product, so they must be aware of any patches and notify affected customers accordingly. SEL'S APPROACH TO SECURITY Whitehead described security as integral to the SEL product life cycle and said this ethos is reflected in well-defined, robust engineering principles implemented all the way to Capability Maturity Model level 5.
|
From page 38... ...
MANAGING FIRMWARE AND SOFTWARE UPDATES SEL takes a somewhat unique approach to managing firmware upgrades: The company itself keeps track of which customers are using every piece of firmware, so it can alert those customers when updates are needed. SEL also provides education and training for customers to implement SEL products securely, even providing cybersecurity services tailored to each client's needs.
|
From page 39... ...
In addition to layering and separating different parts of a system and properly educating clients on security defenses, Whitehead noted that SEL also scrutinizes and verifies every aspect of its supply chain in order to track parts, enhance security, and build trust. Other SEL methods for increasing security include maintaining private security plans, compartmentalizing systems, and monitoring and investigating any unusual events.
|
From page 40... ...
Whitehead explained that a close association with Washington State University allows SEL to tap engineering and computer science talent early and train young developers on the company's methodical engineering design process. While the universities teach the fundamentals of mathematics and engineering principles, Whitehead emphasized that industry is where design and practice are taught, so SEL expects to need to train recruits on its process.
|
From page 41... ...
Other resources include SEL's in-depth training and its Modern Solutions to Power Systems Conference. Schweitzer noted that this year's conference theme, "The Roots of Cyber Insecurity," could be particularly relevant to this discussion.
|
Key Terms
This material may be derived from roughly machine-read images, and so is provided only to facilitate research.
More
information on Chapter Skim is available.