Unleashing Fleet
Excellence
Enhancing Efficiency by Mitigating Unknown
Cyber Risks on Intelligent Fleet Management
IoT Gateway Platform

AT A GLANCEABOUT PRIMAX

Securing Fleet SuccessAccording to a survey, in 2023, rising costs,

information such as cargo spaceeconomic instability, and labor shortages

occupancy, temperature, humidity, andbecame the most pressing concerns for fleet

payload back to the fleet operations

operators. Consequently, fleet operators

center (FOC), allowing for optimized

urgently required intelligent solutions toroute planning and more efficientaddress these challenges, with the fleetmanagement.

management systems serving as their strategicadvisor.

Despite the many benefits offeredby the internet of things (IoT) andBy gathering various data from fleets, operators

fleet management systems, they also

can achieve data-driven decision-making. It

come with cybersecurity risks. Theseis partly for this reason that the global fleet

systems store sensitive data, including drivermanagement market is forecast to grow toinformation, vehicle locations, routes, detailed

US$52.4 billion by 2027, from just US$25.5cargo information, and customer data. Breaches

billion in 2022.

could lead to theft of valuable cargo and financial

Primax’s QCS6490-based IoT gateway platform
is essential for data-driven fleet management.
Supporting various sensors, it seamlessly
integrates with a vehicle’s diagnostics system
and 5G/LTE connectivity. With its robust
computing power and capabilities, Primax’s
QCS6490 reference platform enables invehicle driver monitoring, enhancing safety.
Additionally, it transmits real-time cargolosses, not to mention violations of regulations
like the General Data Protection Regulation(GDPR). “That’s why, even though our customers
haven’t yet asked for cybersecurity measures,
we’re taking proactive steps now,” said Jason Hsu,
Primax’s Vice President and Head of Connected
Mobility Business Unit. “We recognize that fleet
cybersecurity will be critical soon.”Founded: 1984
Headquarters: Taipei City, Taiwan
Industry: Hardware electronics
Employees: 15,000
www.primax.com.tw/en/

BUSINESS CHALLENGE

Security vs. Reliability:
A Product Development Battle
Primax aims to enhance its product security andThis is not the only challenge Primax has facedcompetitiveness by implementing the principles

on its path to embracing cybersecurity. Kuo

and processes of ISO/SAE 21434. But its use ofadded: “As an R&D manager, when we assess

source code scanning tools during the software

the severity of vulnerabilities, even if they’redevelopment phase has posed a dilemma:labeled as ‘medium,’ can we really be sure

Should it prioritize product schedule or security

their impact level is only ‘medium’? Since we’recompliance?

uncertain about how users will utilize ourGlynn Kuo, R&D Senior Manager of Primax’s
Connected Mobility Business Unit, explained:“In the past, source code scanning tools helped
us identify vulnerabilities, but they presented
challenges by providing lists of vulnerabilities
based on individual and separated source
codes, lacking the big picture, especially forsystemic issues. Additionally, as some suppliers
are unable to provide the source code, we haverelied on their vulnerability scan reports andSBOMs (software bills of materials). However,
we lack the means to verify their accuracy.”

products, making decisions on vulnerability
fixes without the complete context often
puts us in a dilemma. Therefore,
we require more vulnerability
intelligence to support us toprioritize.”

SOLUTION

Actionable Intelligence:
The Core of Continuity
To help tackle its challenges, Primax ultimately
chose VicOne’s xZETA automotive vulnerability
and SBOM management system. As an
automotive cybersecurity leader supportedby Trend Micro’s Zero Day Initiative (ZDI),
known for its industry integrity and leadership
position in vulnerability discovery since2007, VicOne has demonstrated its extensive
experience and unique threat intelligence inautomotive vulnerabilities, especially zero-dayvulnerabilities.
Hsu shared: “We chose to partner with VicOne
because their xZETA provides quantitative andqualitative actionable intelligence. Its userfriendly interface offers a detailed overview
of vulnerabilities, while consulting VicOne
helps us make informed decisions. Leveraging
xZETA’s insights allows us to optimize resource
allocation from a management perspective.”xZETA enables binary analysis, empowering
Primax to proactively identify vulnerabilities in
its products’ firmware or binary and overcome
challenges posed by suppliers unable to provide

source code. Additionally, xZETA facilitates automatedscans and notifies of vulnerabilities, ensuring ISO/SAE
21434 compliance and upholding a commitment tocontinuous monitoring. With its unique technology, theVicOne Vulnerability Impact Rating (VVIR), xZETA combinesinternal insights and external threat intelligence toassess vulnerabilities’ real-world impact, aiding in quick
identification and mitigation of high-risk issues. This
ensures that Primax can allocate its resources effectively
based on factual and actionable intelligence.
Kuo explained: “The essence of ISO/SAE 21434
is ‘continuous’ vulnerability management.
Implementing this concept may
increase manpower costs andproduct development timelines
by up to 50%. However, xZETA
standardizes processes, ensuring
true continuity without adding extra
resources. This enables seamless
execution moving forward.”

Implementing [continuous vulnerabilitymanagement] may increase manpower
costs and product development timelines by
up to 50%. However, xZETA standardizes
processes, ensuring true continuity
without adding extra resources.

GLYNN KUO
R&D Senior Manager of Primax’s
Connected Mobility Business UnitRESULT

Trust Through Cyber Risk Removal
With VicOne, Primax now utilizes a fully

example, when presenting

automated vulnerability and SBOM

our products, we conclude bymanagement system to proactively identify

sharing xZETA data, showcasing

potential vulnerabilities, meeting theour expertise in productrequirements of ISO/SAE 21434.

comprehension and cybersecurity

Hsu stated: “VicOne xZETA swiftly addresses
unknown cybersecurity vulnerabilities,
enhancing our proactive management andproduct security. This demonstrates ourimplications. This proves Primax’sprofessionalism, enhancing ourcompetitiveness even in nonmandatory
security scenarios.”

commitment to staying ahead in the dynamic

Looking ahead, Primax aims to integrate

automotive landscape, earning trust fromradio frequency (RF) communication

customers. Partnering with VicOne empowers

as the fourth pillar into its core

us to deliver a resilient and trustworthy

technologies, emphasizing the

cybersecurity solution, solidifying Primax as aimperative of establishing a

reliable leader in the automotive sector.”cybersecurity mindset early on.

Primax benefits from xZETA in other ways.
Hsu continued: “Leveraging xZETA’s actionable
intelligence and intuitive UI, it becomes a
powerful tool in building customer trust. For

By strategically partnering withVicOne, Primax can confidently
lay the groundwork for
effectively addressing challenges.

Learn more and request a demo at VicOne.com.
Copyright © 2024 VicOne Inc. All Rights Reserved.

Leveraging xZETA’s actionable
intelligence and intuitive UI, itbecomes a powerful tool inbuilding customer trust […] bysharing xZETA data, showcasing ourexpertise in product comprehension
and cybersecurity implications.
JASON HSU
Primax’s Vice President and Head ofConnected Mobility Business Unit