What to do about embedded device security?

Security is a growing concern in embedded devices, but there are currently limited best practices and ways for vendors to communicate vulnerabilities./nTooling and infrastructure for security in embedded systems, particularly for microcontroller-based devices, are lagging behind./nStartups like Netrise are beginning to develop tools for vulnerability discovery in embedded devices, but it is still in its early stages./nWhile there is room for improvement, there are some actions that can be taken today, such as utilizing static analysis for code checking./nA specific example of an open source static analyzer, code checker, powered by the clang static analyzer, is available on GitHub.