Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

Small Step Systems

www.smallstepsystems.com/rss/
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 15

  1. How Can Manufacturers Address and Remediate 1000+ CVEs?

    (Small Step Systems)

    Clever Filtering Will Not Do!

  2. No. 74: Learnings from My First CRA Survival Bootcamps

    (Small Step Systems)

  3. Understanding the CVSS Metrics for Exploitability

    (Small Step Systems)

    The Importance of Exploitability Metrics The ultimate goal of the CRA is that products "shall be made available on the market without known exploitable vulnerabilities" (Annex I.I.2a) - relative to the manufacturer's risk assessment.

  4. Running Example for CRA: Heat Pumps in Private Homes

    (Small Step Systems)

    The split-system heat pump consists of an indoor and outdoor unit, which communicate via CAN bus.

  5. Real and Imagined Consequences of Substantial Modifications

    (Small Step Systems)

    ❓ Crucial question: Does a substantial modification imply a new placing on the market?

  6. No, Light-Touch or Full CRA Compliance for FOSS Components

    (Small Step Systems)

    Due Diligence for FOSS Components A manufacturer integrates hundreds of free and open-source software (FOSS) components like U-Boot, Linux kernel, Wayland, Qt, LVGL, GStreamer, Sqlite, VNC, RAUC, OpenSSH and Mosquitto into its machines or devices.

  7. No. 73: Stop Managing Risk in Cybersecurity

    (Small Step Systems)

  8. Fundamental Definitions of the Cyber Resilience Act

    (Small Step Systems)

    The CRA, Blue Guide and Commission guidance differ in their interpretation of fundamental concepts like making available on the market, placing on the market, intended purpose and substantial modification.

  9. No. 72: Commission Guidance on the CRA - Infinite Support Periods

    (Small Step Systems)

  10. Using Wardley Maps to Get Big Architecture Decisions Right

    (Small Step Systems)

    “Think fast, act slow” […] is a hallmark of failed projects.

  11. No. 71: Commission Guidance on the CRA - Placing on the Market

    (Small Step Systems)

  12. Qt Sql under LGPL Despite MariaDB under GPL

    (Small Step Systems)

    A Strange Licensing Situation for MariaDB The Yocto recipe mariadb_*.bb gives the license of MariaDB - a MySQL fork - as GPL-2.0-only.

  13. Legal Disclaimers as CRA Mitigations

    (Small Step Systems)

    Guided by the TÜV Süd, a manufacturer performed risk assessments for several of their measurement instruments.

  14. No. 70: License Violations Likely to Cut Into Your Profits

    (Small Step Systems)

  15. CRA Classification of Embedded Devices: Examples

    (Small Step Systems)

    As embedded devices contain some kind of programmable processor by definition, they are products with digital elements and must comply with the Cyber Resilience Act (CRA).