ARTIFICIAL INTELLIGENCE, DATA & ANALYTICS
BESPOKE DATA VISUALISATIONS
AI ADOPTION SOLUTIONS
CUSTOM SOFTWARE DEVELOPMENT
CLOUD & OPERATIONS
EMBEDDED SOFTWARE
DATA & AI ADVISORY
IOT, CLOUD, DELIVERY & ENABLEMENT
Protecting embedded Linux firmware in marine engine control systems
A global manufacturer of marine propulsion systems needed to strengthen the security of embedded Linux controllers used in diesel engines for container ships and other marine applications.
Our engineer developed a custom security module within the Yocto environment to prevent deployed firmware from being extracted from the device. The solution was integrated into the final stage of the Linux build and deployment process, activating hardware-level security mechanisms designed to protect the client’s proprietary software from unauthorised access and copying.
About the client
The client is a global industrial technology company specialising in large-bore diesel engines and marine propulsion systems. Its engine technologies are used in applications including container ships and offshore vessels.
Protecting proprietary software after deployment
The client used embedded Linux controllers as part of its marine diesel engine systems. Because these controllers contained proprietary software and configuration, protecting the deployed Linux image from external extraction was an important security requirement.
The challenge was not simply to secure files within the operating system. The protection had to become part of the customised Linux build itself and work reliably on the target embedded hardware.
The client therefore needed a mechanism that could be deployed at the final stage of the process and prevent the software stored on the controller from being read or copied afterwards.
Building security into the Yocto image
Our embedded developer worked within Yocto, a framework used to create customised Linux distributions for specific hardware and product requirements.
We developed a dedicated module and Yocto recipe that became part of the client’s embedded Linux image. Once the software had been flashed onto the controller, the module activated the appropriate hardware security mechanism.
This effectively sealed the deployed system against external firmware extraction, reducing the risk of proprietary software being copied or accessed by unauthorised parties.
The work combined Linux customisation with low-level embedded security and required the solution to operate correctly on the target processor and marine control hardware.
A focused security project delivered by one engineer
The complete solution was delivered within approximately three to four months by a single embedded software developer.
Rather than redesigning the wider engine control platform, the engagement focused on one clearly defined security requirement: ensuring that proprietary software could remain protected after deployment onto the physical controller.
Impact
Protected proprietary firmware
The deployed Linux image could no longer be externally extracted once the security mechanism had been activated.
Reduced risk of software copying
The solution strengthened protection against unauthorised access and potential theft of the client’s proprietary code.
Security embedded into deployment
Protection became part of the customised Yocto build and final flashing process rather than a separate manual measure.
Delivered within 3 – 4 months
A single embedded developer designed and implemented the security module within a focused project timeframe.
Core technologies
Operating system: Embedded Linux, custom Yocto builds
Hardware: iMX processor, security fuse module
Scripting: Bash, Shell scripting
Passion and Execution
About Holisticon Connect
At Holisticon Connect, our core values of Passion and Execution drive us towards a Promising Future. We are a hands-on tech company that places people at the centre of everything we do. Specialising in Custom Software Development, Cloud and Operations, Bespoke Data Visualisations, Engineering & Embedded services, we build trust through our promise to deliver and a no-drama approach. We are committed to delivering reliable and effective solutions, ensuring our clients can count on us to meet their needs with integrity and excellence.