CYBERSEC 2022 uses cookies to provide you with the best user experience possible. By continuing to use this site, you agree to the terms in our Privacy Policy. I Agree
Onward Security Info
Onward Security is a leading brand in cybersecurity compliance solutions for the Internet of Things. It has been selected as Best Cybersecurity Company – Asia Gold Winner by Cyber Security Excellence Awards. In addition to possessing an international IoT cybersecurity testing lab, it develops automated security assessment products with AI and machine learning features. It has been dedicating to helping customers in IoT/IIoT equipment manufacturing, finance, telecom, and other industries for fast obtaining security certification and effectively managing risks and vulnerabilities of open source software to ensure cyber and product security.
Contact Representative
- Name: Ginger Chin
- TEL: +886-2-89115035 ext.278
- E-Mail: ginger@onwardsecurity.com
Products
Solutions
Compliance & Assessment Services／ Product Security Services
White Papers
Company A is a world-renowned IoT device manufacturer. It has been deeply involved in the consumer network product market for many years and has a wide reputation. Many of its products are sold all over the world and have a large market share. Since everything is hackable in the era of Internet of Things (IoT), its products have become the target of hackers.
In the frequent attacks on IoT devices, the vulnerabilities that Company A faces include that malicious attacks are triggered by improper handling of device firmware credentials; account secrets with weak encryption storage methods allow hackers to hack into devices; device vulnerabilities can be used by hackers as a springboard for attack paths and the severe cases can lead to the risk of consumer privacy leakage. All these issues have aroused the concern of consumers and government agencies.
The company believes that the causes of these security problems can be prevented by implementing the Security by Design concept during the development process. Therefore, it decided to introduce the Secure Software Development Life Cycle (SSDLC) to reduce the chance of these problems early.
HERCULES SecDevice is a smart and automatic tool that assists the development team by testing for holes in the security deceasing the amount of workload and personnel needed. It has an array of over 100 different kinds of tests that include the OWASP top 10 weaknesses and SANS top 25 that targets website software with black box testing. After finding weaknesses it will detail a report of the weakness and points that are prone to be breached, which will assist the development team develop the ability to test IoT and conform to the Taiwan IPCAM regulations, IEC62443 and other international standards.