Jan Lübbe of Pengutronix e.K. gave a talk at ELCE’16 (Embedded Linux Conference Europe 2016) called: “Long-Term Maintenance, or How to (Mis-)Manage Embedded Systems for 10+ Years”.
“Hardware vendors don’t care about security or maintenance.”
https://www.linux.com/news/event/ELCE/2017/long-term-embedded-linux-maintenance-made-easier
http://linuxgizmos.com/keeping-linux-devices-secure-with-rigorous-long-term-maintenance/
http://elinux.org/ELC_Europe_2016_Presentations
Click to access Long-Term_Maintenance.pdf
Firmware Security 