Avionics Systems in Need of New Cybersecurity Testing

The U.S. Government Accountability Office (GAO) has pushed for further guidelines and regulations to ensure security in Avionics Systems. The report indicates potential cyber risks such as data spoofing, outdated systems, long update cycles, and software vulnerabilities. Researches have also highlighted the vulnerabilities to in-flight connectivity systems including the usage of cheap equipment to eavesdrop on satellite signals that may expose in-flight passenger data. wolfSSL is the leader in Cybersecurity for Avionics Systems and can be applied to mitigate risks and vulnerabilities that come with these breaches. See how wolfSSL can be used in your Avionics applications today!

Aviation today article can be found here.

Contact Us

Please contact us at facts@wolfssl.com with any questions about the webinar. For technical support, please contact support@wolfssl.com or view our FAQ page.

 

Secure wolfMQTT SN with wolfSSL DTLS

The sensor network sub-specification of MQTT does not designate a method for securing the communication between the clients and the gateway. We here at wolfSSL think that is unacceptable! Using the DTLS library of wolfSSL, we would like to protect the sensor data all the way from the client to the gateway, and then from the gateway on to the broker using standard TLS (also from wolfSSL).

Who else is interested in a completely secure, all-in-one solution for MQTT-SN? Please let us know by sending a note to facts@wolfssl.com

You can download the latest release here: https://www.wolfssl.com/download/
Or clone directly from our GitHub repository: https://github.com/wolfSSL/wolfMQTT
While you’re there, show us some love and give the wolfMQTT project a Star!

Upcoming Webinar: Using WolfSSL and Pre-Configured TrustFLEX ATECC608 Secure Element for TLS Networks 

wolfSSL and Microchip are excited to announce our partner webinar: Using WolfSSL and Pre-Configured TrustFLEX ATECC608 Secure Element for TLS Networks co-presented by wolfSSL engineer David Garske and Microchip’s Xavier Bignalet.

Webinar Information 

Date: Wednesday, October 21, 2020

Time: 8:00–8:30 a.m. PDT

Register Here: https://events.microchip.com/shieldsupsession24

 

Learn how to implement mutual authentication using X509 certificates with the WolfSSL TLS stack and the TrustFLEX ATECC608 secure element from Microchip’s Trust Platform. We will discuss TLS concepts in the first half of the webinar, and then an expert from WolfSSL will give a hands-on demonstration featuring a SAM D21 Arm® Cortex®-M0+ based microcontroller and a WINC1500 Wi-Fi® module to show how easy it is to get started with mutual authentication.

Learn more at: https://www.microchip.com/training/webinars/security/shields-up-webinar-series

 

About Microchip

Microchip Technology Incorporated is a leading provider of smart, connected and secure embedded control solutions. Its easy-to-use development tools and comprehensive product portfolio enable customers to create optimal designs, which reduce risk while lowering total system cost and time to market. The company’s solutions serve more than 120,000 customers across the industrial, automotive, consumer, aerospace and defense, communications and computing markets. Headquartered in Chandler, Arizona, Microchip offers outstanding technical support along with dependable delivery and quality.

 

Are you new to wolfSSL?

wolfSSL focuses on providing lightweight and embedded security solutions with an emphasis on speed, size, portability, features, and standards compliance, such as FIPS 140-2 and 140-3, RTCA DO-178C level A certification, and support for MISRA-C capabilities. wolfSSL supports industry standards up to the current TLS 1.3 and DTLS 1.2, is up to 20 times smaller than OpenSSL, offers a simple API, an OpenSSL compatibility layer, is backed by the robust wolfCrypt cryptography library, and much more. Our products are open source, giving customers the freedom to look under the hood.

If you have any questions about the webinar, please email us at facts@wolfssl.com.

Hope to see you there! 

 

Contact Us 

Please contact us at facts@wolfssl.com with any questions about the webinar. For technical support, please contact support@wolfssl.com or view our FAQ page. 

 

Additional Resources 

In the meanwhile, check out the wolfSSL embedded SSL/TLS library, star us on Github, and learn more about the latest TLS 1.3 is available in wolfSSL. 

 

Upcoming Partner Webinar with DDC- I: Out-of-the-Box Security for Avionics Systems

Get pumped for our partner webinar with DDC-I! Introducing “Out-of-the-Box Security for Avionics Systems” co-presented by wolfSSL Engineer, Tesfa Mael and Technical Marketing Manager at DDC-I, Gary Gilliland.  

Modern avionics systems often need to ensure that they are not only safe per DO-178C processes but also that cyber security is addressed. This presentation will outline the architectural elements needed to create such systems and present off-the-shelf products that system developers can readily leverage.

To create a secure product, the system threats must be determined based on how the system is exposed. Once that is determined, requirements can be defined to mitigate those threats. The results of this analysis at a minimum will typically require that the system is required to boot securely. Secure boot basically means that you can guarantee that the software installed on the system has not been tampered with. Also, a secure boot environment implies that any future updates to the software can be installed in a trusted manner.

Once the system is securely booted the RTOS needs to provide a safe and secure foundation for running applications at different design assurance levels and keeping the data separated.

This webinar will explain how the Deos RTOS is a key foundational element for safe and secure system design and how the integration of Deos and wolfCrypt is a very attractive solution for avionics developers who require a secure, out-of-the-box, safety-critical solution that comes complete with DAL A evidence.

 

Registration Information  

When: Oct 15, 2020 10:00 AM Pacific Time (US and Canada) 

Topic: Webinar: Out-of-the-Box Security for Avionics Systems

 

Register in advance for this webinar:

https://us02web.zoom.us/webinar/register/WN_Bdkq01nkRJu87zNETsRGVQ

 

After registering, you will receive a confirmation email containing information about joining the webinar.

Can’t wait to see you there!

 

Contact Us 

Please contact us at facts@wolfssl.com with any questions about the webinar. For technical support, please contact support@wolfssl.com or view our FAQ page. As always, there will be a Q&A session following the live presentation. 

 

Additional Resources 

In the meanwhile, check out the wolfSSL embedded SSL/TLS library, star us on Github, and learn more about the latest TLS 1.3 is available in wolfSSL. 

wolfSSL Summer of Security Internship Program 2021

Are you a college or university student interested in application, device, and Internet security?  Do you want to learn more about cryptography, SSL/TLS, SSH, MQTT, TPM, secure boot, and other protocols used to secure connected applications and devices?  If so, continue reading to learn about the wolfSSL Summer of Security internship program!

wolfSSL is the leading global producer of Open Source Internet security products, securing over 2 Billion active connections on the Internet today. The wolfSSL “Summer of Security” program is an internship which spans the Summer months and brings qualified students on-board to learn about how security software is written, tested, and used around the world.

Interns who participate in this program gain valuable knowledge in the embedded SSL/TLS and security industry as well as C programming experience on Linux and embedded systems.  Throughout the summer, interns play a role in improving wolfSSL products – working on testing, documentation, examples, porting, marketing, and interacting with our community.

This program is a great opportunity to be part of the Open Source community, learn how real-world software is created and maintained, gain work experience in the field of Computer Science, and work towards a potential career with the wolfSSL team.


Requirements

Ideal candidates are students who have experience in C programming.  Prior experience with embedded systems, network programming, Linux/Unix, and familiarity with git/GitHub are a plus.


Apply Today!

If you are interested in learning more about the wolfSSL Summer of Security internship program, please send the following items to internships@wolfssl.com:

  1. Resume with Cover Letter
  2. C Programming Sample
    • A C application which best demonstrates your C programming ability.  There are no requirements on the category or length of the application.
  3. Technical Writing Sample
    • A writing sample which best demonstrates your writing ability.  There is no requirement of topic or length of this sample.

Learn More

wolfSSL Homepage
wolfSSL Products Page
wolfSSL User Manual
TLS 1.3 Support!
wolfSSL Examples Repository (GitHub)

wolfSSL at MSU Virtual Fall Career Fair 2020

wolfSSL will be attending the Virtual MSU Career Fair next week! wolfSSL regularly attends Career Fairs at Montana State University in Bozeman, MT. This year, the MSU Career Fair will be in a virtual format, hosted on the Handshake platform.

wolfSSL will be participating in the career fair on both Wednesday (10/7/2020) and Thursday (10/8/2020). We will be hosting several 30-minute sessions on the Handshake platform which will introduce wolfSSL, our products, and our open internship positions for summer 2021! Each session can hold a maximum of 50 attendees. Current session blocks are scheduled for:

Day 1 – Wednesday (10/7/2020)
– 10:00 – 10:30am MDT
– 11:00 – 11:30am MDT
– 12:00 – 12:30am MDT

Day 2 – Thursday (10/8/2020)
– 3:00 – 3:30pm MDT
– 4:00 – 4:30pm MDT
– 5:30 – 6:00pm MDT

There will also be several 10-minute 1:1 time slots available for students who would like to talk directly with a wolfSSL representative. For more information, visit the MSU Career Fair events on Handshake:

Montana State University Fall Career Fair 2020 – Virtual Fair Day 1
Montana State University Fall Career Fair 2020 – Virtual Fair Day 2

For more information, contact facts@wolfssl.com, or download wolfSSL products from our download page to try them out. We look forward to meeting you!