TY - CONF A1 - Herbold, Florian A1 - Reindl, Andrea A1 - Meier, Hans A1 - Niemetz, Michael A1 - Krämer, Stefan A2 - Kubátová, Hana A2 - Fišer, Petr A2 - Borecký, Jaroslav T1 - Secure Software Updates: Challenges and Solutions for Embedded IoT Systems T2 - Proceedings of the 9th Embedded Systems Workshop: July 1-3, 2021 Horomerice, Czech Republic N2 - The invention of the internet made the development of intelligent networking of millions of embedded systems possible. This enabled smart buildings, power grids and cities as well as applications in the fields of health, agriculture and industry. These systems frequently perform safety-critical applications and operations. This makes it urgent to protect these sensible systems as effectively as possible. Especially firmware updates are often the weak point in the systems. If unauthorised persons gain access to the system during the update, malware can be injected or sensitive data can be read and stolen. This paper describes the challenges of secure firmware updates. To protect an embedded system from potential attackers, the concepts integrity, authenticity and confidentiality have to be adhered during the update process. Otherwise, there is an increased risk of modifying or reverse engineering the firmware image. Likewise, inadequately protected software can enable the installation of third-party firmware as well as the installation of firmware on a third-party system. Threat prevention is presented with solutions derived from functional safety and IT security. Aspects of protection against errors in the transmission of updates and against attacks aiming to compromise the system are explained. Finally, a possible sequence of a secure update process is examined in detail for a real embedded system implementation. For this purpose, the preparation, transmission and installation of a firmware update in the bootloader are discussed KW - Bootloader KW - Cryptograph KW - Embedded systems KW - Firmware Update KW - IoT KW - Safety, Security KW - Software Protection Y1 - 2021 UR - https://opus4.kobv.de/opus4-oth-regensburg/frontdoor/index/index/docId/2756 UR - https://www.researchgate.net/publication/354995594_Secure_Software_Updates_Challenges_and_Solutions_for_Embedded_IoT_Systems SN - 978-80-01-06858-8 SP - 5 EP - 13 ER -