EEMBC and prpl align to drive use of hypervisors to create security-by-separation for a more trusted IoT

Collaboration to assess performance overhead of virtualization technologies in embedded devices

SANTA CLARA, CALIF – April 4, 2017 – Today the prpl Foundation and EEMBC announced a formal partnership to advance the use of security-by-separation in Internet of Things (IoT) edge devices. By developing an industry-standard hypervisor benchmark, the collaboration aims to shatter the perception that the use of hardware virtualization in low-power embedded devices comes with big performance and energy overheads.

prpl is a community driven, non-profit organization with a focus on enabling the security and interoperability of embedded devices for the IoT and smart society of the future. EEMBC is an industry alliance that develops benchmarks to help system designers select the optimal processors and understand the performance and energy characteristics of their systems. The partnership will see EEMBC’s Markus Levy alongside Art Swift, president of prpl Foundation, co-chair the joint EEMBC/prpl HyperBench Working Group. The aim of the group will be to assess the performance of new lightweight embedded hypervisors paired with System on Chips (SoCs) with hardware support for virtualization.

Hardware virtualization technology coupled with hypervisors can provide improved security through isolation or ‘separation’ of users, tenants, and applications running on a given device. This approach is well understood and widely used in the datacenter, but not traditionally in deeply embedded, resource-constrained systems such as those in the IoT – primarily due to perceptions of performance limitations or associated ‘overhead’. EEMBC and prpl hope to demonstrate that any such limitations are mitigated through new developments and techniques.

The way software or firmware gets assembled today the maker of the device often has little control over all of the components as a whole. By using hypervisors at the hardware level to create security through separation, supply chain security issues could be greatly reduced while preserving the core functionality of the device – even if a security issue arises with another component of the system or it is compromised by malware such as Mirai.

“EEMBC sees value in HyperBench in two ways. The first way follows our traditional model of creating benchmarks to help system developers select the most optimal processing solution for their applications; in this case, HyperBench will allow processor vendors to fairly demonstrate their performance advantages,” said Markus Levy, EEMBC president. “In the second way, HyperBench will help out the industry in general by demonstrating that with advanced hardware assist for virtualization, the performance impact of hypervisors will be minimal.”

prpl and EEMBC members have considerable expertise in virtualization and hypervisor technologies. prpl has based its peer-reviewed Security Framework in large part on this approach, and many of its members are well-versed in deployment of the technology. EEMBC and its members have previously spent considerable time and energy on assessing how the performance overhead of virtualization technologies can be tested or benchmarked. Together the joint working group will create an architecture and operating system neutral benchmark tool to support vendors of processors, hypervisors, and operating systems, as well as their customers – the IoT system designers.

“Security of IoT is not a problem that any one company or entity can solve on its own,” said Art Swift, president of the prpl Foundation. “It will take cooperation at all levels to work towards best practices and developing universal standards. At prpl we are delighted to collaborate with EEMBC to show how a separation-based approach rooted in hardware can create a more secure IoT without significant performance penalties.”

Initial members from prpl of the new benchmarking working group also include Kernkonzept and Imagination Technologies.

About EEMBC

EEMBC is an industry alliance that develops benchmarks to help system designers select the optimal processors and understand the performance and energy characteristics of their systems. EEMBC has benchmark suites targeting cloud and big data, mobile devices (for phones and tablets), networking, ultra-low power microcontrollers, the Internet of Things (IoT), digital media, automotive, and other application areas. EEMBC also has benchmarks for general-purpose performance analysis including CoreMark, MultiBench (multicore), and FPMark (floating-point).  For more information about EEMBC, please visit: http://eembc.org

About prpl Foundation

prpl (pronounced “Purple”) is a community driven, non-profit organization with a focus on enabling the security and interoperability of embedded devices for the IoT and smart society of the future. prpl represents leaders in the technology industry investing in innovation in efficiency, portability and compatibility for the good of a broad community of developers, businesses and consumers. For more information about the prpl Foundation, please visit: http://prpl.works.

Prpl Foundation tackles how to secure the Internet of Things at Embedded World 2017

Not for profit and its members showcase innovation and push the limits of embedded computing

Santa Clara, Calif. – 9 March 2017 – At Embedded World in Nuremburg, 14-16 March 2017, prpl Foundation and several of its member companies will address of the security concerns presented by embedded computing systems as they become more intertwined in our lives.

During two separate presentations on March 14 at the show, prpl’s chief security strategist, Cesare Garlati, will outline and demonstrate how a new separation-based approach anchored in hardware can create the trust needed across the IoT from node to cloud. How We Can Fix Embedded Computing Through an Open Source, Silicon-Layer Approach will take place at 9:30-10:00 and the Interactive Session: How a New Hardware-Based Approach Can Fix Critical Areas of Embedded Computing Security will take place at 14:30 – 15:00.

Continue reading

Alliance between prpl Foundation and IoTSF puts ‘security by design’ at the heart of embedded computing

New collaboration to transform security of the Internet of Things

LONDON, UK – 5 December 2016 – The prpl Foundation and the IoT Security Foundation (IoTSF), two influential not-for-profit organizations working to promote security and openness in the Internet of Things (IoT), today announced that they have entered into a formal agreement to cooperate on projects that put ‘security by design’ into the IoT.  One element of the collaboration, around the IoTSF Self Certification Working Group, will be discussed tomorrow in London at the IoTSF Conference 2016 entitled Building an Internet of Trust.

”The prpl Foundation and the IoTSF share a belief that security is a fundamental requirement to the enablement and adoption of connected devices,” said Art Swift, president of the prpl Foundation.  “We are delighted to work together to advance the many aspects of IoT security to make its widespread use less risky so consumers can use the IoT to its full potential safely.” Continue reading

prpl Foundation and CABA create important alliance to advance smart home security

Open source foundation joins forces with leading smart home and building organization

November 28, 2016 – SANTA CLARA, CA

Today, the not for profit prpl Foundation, an open-source, community-driven, collaborative, foundation with a focus on enabling next-generation datacenter-to-device portable software and virtualized architectures, announced a significant collaboration with the Continental Automated Buildings Association (CABA), an international not-for-profit industry association dedicated to the advancement of intelligent home and intelligent building technologies. The mutual alliance will see both membership groups working together on research projects and whitepapers to improve standards in smart home security.

“prpl’s alliance with CABA is an incredibly important step in the advancement of smart home technology,” said Art Swift, president of the prpl Foundation. “By collaborating with CABA’s wealth of smart home security experts and members, we will work together to provide high quality research and guidance that will push IoT industry standards to make sure that consumers are kept safe as connected device usage in their homes grows.”
Continue reading

prpl Foundation collaborating with FCC Working Group

prpl community manager Eric Schultz collaborating with Software Configurable Radio sub-group

Monday, 21 November 2016 – SANTA CLARA, CA

It was confirmed today that Eric Schultz, community manager for the not for profit prpl Foundation, the open-source, community-driven, collaborative, foundation with a focus on enabling next-generation datacenter-to-device portable software and virtualized architectures, has been collaborating with the Federal Communications Commission (FCC) Technological Advisory Council Software Configurable Radios Sub-Working Group. In this role, Schultz will help educate and guide other TAC members on how proposed FCC regulations may affect the open source community and the growth of the Internet of Things (IoT) — and explore how the various stakeholders can better work together.

According to Schultz, “It’s exciting to be able to share the viewpoints of the open source community as part of the overall effort to investigate how to strike an appropriate balance between protecting the radio spectrum from interference, while still allowing innovation and the flexible addition of features. These issues have been at the core of prpl Foundation and OpenWrt projects in which I participate.”

Continue reading

prpl Foundation creates IoT Trust Continuum chaired by Intercede

New working group to advance IoT security and produce digital chain of trust framework

SANTA CLARA, CA — The prpl Foundation, the open-source, community-driven, collaborative, non-profit foundation with a focus on enabling next-generation datacenter-to-device portable software and virtualized architectures, today announced the formation of the Trust Continuum working group. The new prpl initiative will be chaired by Nick Cook, CIO of digital trust specialist and prpl member company, Intercede. The purpose of the Trust Continuum is to provide the guidance, APIs and framework needed for developers and manufacturers to establish end-to-end trust in embedded devices, critical to the security of IoT.

“In a highly connected world, it is vital that a chain of trust can be established from the silicon of an embedded device right through to the provisioning of the service itself in order for mutual trust to be achieved,” said Art Swift, president of the prpl Foundation. “We call this the Trust Continuum, and it ensures the high integrity of these digital exchanges required to stop malware or other subversive actors from compromising them. This trust is a critical element missing from IoT as it stands today and why threats, such as the Mirai IoT malware that has infected nearly half of a million devices, have been so successful.” Continue reading

prpl Foundation Adds Carrier Interest Group to Shape the Future of Smart Home Technology

New Group Borne out of Former Home Gateway Initiative to Meet Needs of Major International Carriers for the Digital Home and IoT

SANTA CLARA, CA — The prpl Foundation, the open-source, community-driven, collaborative, non-profit foundation with a focus on enabling next-generation datacenter-to-device portable software and virtualized architectures, has announced the formation of its first Carrier Interest Group (CIG). The charter of the CIG is to ensure that the technical needs of major international carriers are represented and communicated to the wider prpl community and contribute to prpl’s coordinated response to new regulations put forth by government agencies, such as the FCC in the US, which potentially limit the use of open source software.

The new group will also help define possible new enhancements for OpenWrt software and hardware with the aim to produce carrier-grade, commercial standards for improving the security of home gateway, home network and smart home devices.

Continue reading