Case Study: Fortune 500 Company closes memory leaks and strengthens mission-critical device security with Sternum

A Sternum Case Study

Preview of the Fortune 500 Company Case Study

Fortune 500 Company Closes Memory Leaks in Its New MissionCritical Device

Fortune 500 Company was developing a new mission-critical device on Zephyr/ARM64 and needed low-overhead embedded security with 0-day protection. The team was especially focused on protecting sensitive data in TrustZone, integrating easily with the device stack, and meeting regulatory demands for demonstrable security controls. They chose Sternum as the best fit for this preproduction effort.

Sternum implemented its EIV runtime protection and embedded integrity verification to add binary-instrumented memory and control-flow security with near-zero overhead. During deployment, Sternum flagged a non-null-terminated JSON string used with `strlen()`, helping engineers quickly identify and fix a memory integrity issue before release. The result was stronger runtime protection against memory corruption and in-memory attacks, plus improved visibility into vulnerabilities that static analysis had missed.


Open case study document...

Sternum

6 Case Studies