Industry News

IAR Embedded Workbench for Arm Version 9.40 Enhances Code Security with PACBTI Integration

Views : 21
Update time : 2023-06-09 11:13:11
        June 7, 2023 - IAR, a global leader in embedded software and services, has released the popular IAR Embedded Workbench for Arm v9.40. The latest release introduces enhancements for code security: the addition of a pointer verification and branch target identification (PACBTI) extension specific to Armv8.1-M. With PACBTI, user applications can be protected by cryptographic signatures, effectively preventing attackers from taking control of the entire system. The new release also offers more powerful and intelligent IDE Build Actions for a better development experience for software engineers.
 
 
        This latest release from IAR addresses the critical need for enhanced code security as legislation and regulations related to product security continue to grow and improve. Among the many features in focus, it is worth noting that IAR Embedded Workbench for Arm offers a complementary blend of innovative compiler features and PACBTI extensions that provide strong protection against two prevalent attacks, including Return Oriented Programming (ROP) and Jump Oriented Programming (JOP). These two attacks involve exploiting code fragments in a user's application to gain control of the call stack by using attack techniques like stack smashing, where the attacker can tamper with key pointers present in the stack to redirect the address to a discovered vulnerable code fragment to achieve the attacker's goal. With these new features, IAR Embedded Workbench creates an impenetrable barrier for attackers to exploit code vulnerabilities to compromise system integrity. 
        While PACBTI can be used to identify and troubleshoot common program errors that launch attacks, its effectiveness relies on good software development practices, including the use of various code analysis tools. 
        Security has become a top priority for embedded software developers," said Anders Holmberg, IAR's Chief Technology Officer. The latest version of IAR Embedded Workbench for Arm incorporates sound software development practices and provides the foundation for truly secure embedded applications. Known for its efficiency, productivity and code quality, IAR combines the IAR Embedded Trust and IAR Secure Deploy embedded security solutions to provide one of the most comprehensive end-to-end solutions, ensuring robust security at every step of the process, from product development to mass production." 
        IAR Embedded Workbench for Arm is available as a complete development tool chain with a highly optimised compiler and powerful debugger features. Developers can use code analysis tools such as C-STAT and C-RUN to proactively identify various code issues, improve code quality and minimise the potential security attack surface. Static and dynamic analysis plays an important role in the development process to identify and eliminate various defence vulnerabilities. In addition, intelligent IDE Build Actions have been introduced in the latest release, replacing the previous pre-build and post-build operations and enabling developers to execute multiple commands before compiling and linking. 
        IAR Embedded Workbench for Arm 9.40 continues and extends the previous version's support for Armv8-A AARCH64, enabling 64-bit processors to run in 32-bit mode with support for Armv8-A AARCH32. In addition, the new version has enhanced compatibility with the Renesas E2/E2 lite emulator, providing seamless connectivity for programming and debugging Arm Cortex-M MCUs and Cortex-A MPUs. The new version also adds support for over 275 new chips, covering products from all major semiconductor partner manufacturers. In terms of extended language modes, the IAR C/C++ compiler supports additional GCC compiler function attributes, extending the interoperability of the wider embedded RTOS/middleware ecosystem. With the release of IAR Embedded Workbench for Arm version 9.40, IAR reinforces its commitment to providing developers with advanced tools and comprehensive security measures to drive the embedded industry towards a more innovative and complete future.


 
Related News
Read More >>
How many chips does a car need? How many chips does a car need?
Sep .19.2024
Automotive chips can be divided into four types according to their functions: control (MCU and AI chips), power, sensors, and others (such as memory). The market is monopolized by international giants. The automotive chips people often talk about refer to
Position and Function of Main Automotive Sensors Position and Function of Main Automotive Sensors
Sep .18.2024
The function of the air flow sensor is to convert the amount of air inhaled into the engine into an electrical signal and provide it to the electronic control unit (ECU). It is the main basis for determining the basic fuel injection volume. Vane type: The
Chip: The increasingly intelligent electronic brain Chip: The increasingly intelligent electronic brain
Sep .14.2024
In this era of rapid technological development, we often marvel at how mobile phones can run various application software smoothly, how online classes can be free of lag and achieve zero latency, and how the functions of electronic devices are becoming mo
LDA100 Optocoupler: Outstanding Performance, Wide Applications LDA100 Optocoupler: Outstanding Performance, Wide Applications
Sep .13.2024
In terms of characteristics, LDA100 is outstanding. It offers AC and DC input versions for optional selection, enabling it to work stably in different power supply environments. The small 6-pin DIP package not only saves space but also facilitates install