We’re proud to announce that Very has received a 2018 IoT Evolution Security Excellence Award from IoT Evolution magazine, the leading publication covering IoT technologies. The award honors organizations delivering software or hardware solutions that advance security for IoT devices and networks. We were recognized for using the Nerves framework to bring web security best practices to the Internet of Things (IoT).
Though the IoT landscape is improving, many existing products are rampant with security flaws. Our solution to this problem is to bring web tools and technology to the hardware world through Elixir and Nerves. This makes it possible to iterate quickly and securely by leveraging the web-security best practices that are a part of the Elixir web ecosystem.
“The companies selected for the IoT Evolution Security Excellence Award exemplify innovation driving the fast-growing Internet of Things marketplace. It is my honor to congratulate Very for their innovative work and contribution to this rapidly evolving industry,” said Carl Ford, CEO of Crossfire Media, a co-publisher of IoT Evolution Magazine.
Why Elixir and Nerves?
Elixir has been adopted by the web community and it also boasts strengths for low-level hardware applications. The Nerves project successfully leverages the ideologies of web development (frameworks, powerful tooling, etc...) and combines them with the strengths of embedded Elixir. This makes the Elixir/Nerves stack ideal for rapid, robust development of IoT devices, and as such, it is the preferred IoT firmware stack used at Very.
The web is a world of massive user bases and ever-changing user needs, which requires web software to be robust, performant, and adaptable. Due to the scale of many web platforms, it’s feasible that a single line of code in a web ecosystem may execute more times in one day than its embedded counterpart will be executed over the entire lifetime of its hardware host. In addition, this single line of code will need to evolve to meet the needs of its user base without incurring huge engineering costs behind the changes.
Luckily, the ecosystem of web languages and technologies has evolved in order to meet the needs of the web world. This has yielded languages that are easy to write/refactor and frameworks that enforce best practices. Among these best practices are security-minded patterns, test-driven development, and continuous delivery.
Elixir is a language designed for building distributed, fault-tolerant applications. Elixir is executed within the Erlang runtime system, which was designed for use in low-level hardware applications and is most notable for being:
- Soft real-time
- Highly available and non-stop
In recent years, the Phoenix framework has made it possible for Elixir to be successfully adopted by web developers looking to create web-based applications that leverage the core characteristics of the language. As a result, an ecosystem of Elixir tools that supports the web’s best practices has emerged.
Though Elixir has been adopted by the web community, its strengths for low-level hardware applications still remain. The Nerves project successfully leverages the ideologies of web development (frameworks, powerful tooling, etc.) and combines them with the strengths of embedded Elixir. This makes the Elixir/Nerves stack ideal for rapid, robust development of IoT devices, and as such, it is the preferred IoT firmware stack used at Very.
Particular capabilities of the Elixir/Nerves stack which have aided in the agile and lean development of IoT devices at Very include:
- Seamless test-driven development including peripheral/sensor emulation. This eliminates slow hardware-in-the-loop testing on every iteration and often yields software that works the very first time it touches the embedded target.
- Continuous delivery of tested firmware builds via common continuous delivery tools designed for the web.
- Many compatible open source tools for secure communication with web servers via HTTP and WebSockets.
- Fault-tolerant and automated OTA firmware updates.
- Applications that are tolerant to hardware failures/abnormalities like accidental shorts, etc...
These capabilities are critical when it comes to delivering reliable software quickly (as is the custom among strong web development teams), but they are exceedingly difficult or impossible to achieve with embedded C and out of the box embedded Linux solutions.
By leveraging Nerves and utilizing its security-minded ecosystem of open source tools, we’re changing the way IoT products are being developed.
In addition to winning the 2018 IoT Evolution Security Excellence Award, Very was named one of the Top 50 IoT Solution Providers by CIO Applications Magazine, and has won awards for being a top blockchain technology provider by both CIO Applications Magazine and by Enterprise Security Magazine.