Timesys’ Security Notification and Update Management Help You Stay Secure

Maintaining software security for your embedded Linux based device is vital but, the manual process of keeping up with the newly discovered vulnerabilities for your device software is often not feasible. Timesys’ automated Security Notification and Update Management Service helps reduce the time and costs associated with maintaining the software security of your embedded Linux based device — throughout the product lifecycle.

Security Monitoring and Notification

Timesys’ Threats Response Security Team (TRST) constantly monitors security issues that impact open source software being used by Timesys customers, eliminating the time you/your team would spend continuously monitoring Common Vulnerabilities and Exposures (CVEs) yourself. The TRST team:

1. Discovers and identifies security issues relevant to the code in the Timesys source code repository by utilizing a Timesys-built CVE manager,
2. Analyzes the state of the known vulnerability to determine if there is an available patch or update and
3. Adds available security updates and patches to the code in the source code repository.

Timesys’ Security Notification enables you to track relevant security vulnerabilities for only the software components used in your particular configuration. With our on-demand notification, you/your team can:

1. Initiate pull notification by running a command to check for CVEs (if using Timesys’ Yocto Project Café or Factory desktop development environment) or
2. Get push notification by opting to store your workorder or manifest in the Timesys web development environment.

Update Management Service

Timesys’ Update Management Service makes it easy for you/your team to apply security updates and patches into your software with confidence. You choose what gets updated, enabling you to remain in control.

To request more information about Timesys’ Security Monitoring and Update Management Service, contact us via our online form.