Unleashing Fleet Excellence
Enhancing Efficiency by Mitigating Unknown Cyber Risks inVIntelligent Fleet Management IoT Gateway Platform

Executive Summary
Primax's QCS6490-based IoT gateway platform revolutionizes fleet management
by integrating sensors and 5G/LTE connectivity for real-time monitoring andoptimized route planning. While enhancing safety and efficiency, cybersecurity
risks loom large, prompting proactive measures. To tackle challenges invulnerability identification and prioritization, Primax selects VicOne's xZETA for its
comprehensive automotive vulnerability management, ensuring ISO/SAE 21434
compliance and efficient resource allocation, thus securing its competitive edge.

About Primax Electronics

Business Challenge

Primax’s QCS6490-based
IoT gateway platform isessential for data-driven
fleet management.
Supporting various
sensors, it seamlessly
integrates with avehicle’s diagnostics
system and 5G/LTE
connectivity. With its
robust computing powerand capabilities, Primax’s
QCS6490 reference
platform enables invehicle driver monitoring,enhancing safety.
Additionally, it transmits
real-time cargo
information such as cargospace occupancy,
temperature, humidity,and payload back to thefleet operations center(FOC), allowing for
optimized route planningand more efficientmanagement.

Security vs. Reliability: A Product Development BattlePrimax aims to enhance its product security and competitiveness byimplementing the principles and processes of ISO/SAE 21434. But its use of sourcecode scanning tools during the software development phase has posed adilemma: Should it prioritize product schedule or security compliance?
Glynn Kuo, R&D Senior Manager of Primax’s Connected Mobility Business Unit,
explained: “In the past, source code scanning tools helped us identify
vulnerabilities, but they presented challenges by providing lists of vulnerabilities
based on individual and separated source codes, lacking the big picture, especiallyfor systemic issues. Additionally, as some suppliers are unable to provide thesource code, we have relied on their vulnerability scan reports and SBOMs(software bills of materials). However, we lack the means to verify theiraccuracy.”

Our Solution With AWS

Actionable Intelligence: The Core of Continuity
To help tackle its challenges, Primax ultimately chose VicOne’s xZETA automotive
vulnerability and SBOM management system. xZETA is a SaaS platform built on
the Amazon Web Services (AWS) cloud, which supports high-stability
infrastructure and operation. xZETA enables binary analysis, empowering Primax
to proactively identify vulnerabilities in its products’ firmware or binary andovercome challenges posed by suppliers unable to provide source code.
Additionally, xZETA facilitates automated scans and notifies of vulnerabilities,
ensuring ISO/SAE 21434 compliance and upholding a commitment to continuousmonitoring. With its unique technology, the VicOne Vulnerability Impact Rating(VVIR), xZETA combines internal insights and external threat intelligence to assessvulnerabilities’ real-world impact, aiding in quick identification and mitigation ofhigh-risk issues. This ensures that Primax can allocate its resources effectively
based on factual and actionable intelligence.

to easily upload firmware and handle tasks such as generating SBOMs andKuo explained: “The essence of ISO/SAE 21434 is ‘continuous’ vulnerabilitymanagement. Implementing this concept may increase manpower costs andproduct development timelines by up to 50%. However, xZETA standardizesprocesses, ensuring true continuity without adding extra resources.”
xZETA utilizes Amazon S3 and Amazon Relational Database Service (RDS) for secure,reliable file storage and streamlined relational database management, enablingflexible management and cost-effectiveness while freeing up resources forapplication development. Additionally, to ensure a future-proof solution, xZETA
utilizes Amazon Elastic Kubernetes Service (Amazon EKS) for reliable managed
Kubernetes services. This simplifies the deployment and scaling of containerized
applications. Through seamless integration with AWS compute units, xZETA benefit
from excellent computational scalability to handle increasing service volumes andsuperior computational elasticity to manage sudden bursts in service demand.

xZETA Architecture: Showcase which AWS technologies xZETA is leveraging.
Results and Benefits

Trust Through Cyber Risk Removal
With VicOne, Primax now utilizes a fully automated vulnerability and SBOM
management system to proactively identify potential vulnerabilities, meeting therequirements of ISO/SAE 21434. “VicOne xZETA swiftly addresses unknown
cybersecurity vulnerabilities, enhancing our proactive management and productsecurity. This demonstrates our commitment to staying ahead in the dynamic
automotive landscape, earning trust from customers. Partnering with VicOne
empowers us to deliver a resilient and trustworthy cybersecurity solution,solidifying Primax as a reliable leader in the automotive sector,” said Jason Hsu,
Primax’s Vice President and Head of Connected Mobility Business Unit.

About VicOne
With a vision to secure the vehicles of tomorrow, VicOne delivers a broad portfolio of cybersecurity
software and services for the automotive industry. Purpose-built to address the rigorous needs ofautomotive manufacturers, VicOne solutions are designed to secure and scale with the specialized
demands of the modern vehicle. As a Trend Micro subsidiary, VicOne is powered by a solid
foundation in cybersecurity drawn from Trend Micro's 30+ years in the industry, delivering
unparalleled automotive protection and deep security insights that enable our customers to build
secure as well as smart vehicles. For more information, visit: https://vicone.com/.