Through its global network of 22 programming facilities, EPS Global offers secure programming and encryption solutions to mitigate cyber threats originating online. EPS Global also collaborates with IAR Systems, the Swedish software company that provides development tools for embedded systems, to offer a unique, end-to-end solution that enables companies to implement security as a core capability, ensuring that all endpoints are tamper-proof and establishing a trusted supply chain.
According to an article in Security magazine, cyberattacks increased by 38% worldwide in 2022. In response, the UK passed the Product Security and Telecommunications Infrastructure (PSTI) Bill, while the US, also in December 2022, expanded cybersecurity controls under the Federal Food, Drug, and Cosmetic Act to include internet-connected medical devices. In the EU, the Cybersecurity Act strengthens the European Union Agency for Cybersecurity (ENISA) and gives it a key role in creating and maintaining the European cybersecurity certification framework.
Colin Lynch, CEO of EPS Global, explains: "In our increasingly interconnected world, cyber attackers pose a serious threat to property, commerce, and the economy, and ultimately to people's lives. Legislation to counter these very real threats is requiring semiconductor devices to be secure against malicious attacks and unintentional compromises."
EPS Global offers a range of options to help customers comply with new regulations and mitigate cybersecurity risks. The company provides secure integrated circuit programming services to many large original equipment manufacturers (OEMs) in the consumer and automotive sectors, who are well aware of the measures they must take to protect their integrated systems against tampering. The customer sends an encrypted package containing the encrypted binary file, digital signature, and encrypted keys to EPS Global, which is ISO 27001 certified, guaranteeing the security of the information held by the company. Access to machines at EPS Global's programming centers is controlled by authorized personnel using biometric identification, and a secure VPN connection is used to ensure the secure, encrypted transfer of programming files to individual machines.
For customers unsure of their protection needs, EPS Global and IAR Systems can develop a comprehensive secure provisioning workflow and secure data scheduling strategy. This may include: protecting devices by inhibiting malware injection; ensuring compliance with regulations; and making each device tamper-proof. Once the strategy is determined, it is implemented at EPS Global's scheduling centers.
