https://www.techtarget.com/whatis/definition/firmware
Firmware is a type of software program embedded into hardware devices to help them function smoothly and effectively.
Firmware is installed directly onto a piece of hardware during manufacturing. It is used to run user programs on the device and can be thought of as the software that enables hardware to run.
Hardware makers use embedded firmware to control the functions of various hardware devices and systems, much like a computer's operating system (OS) controls the function of software applications. Firmware is often written into non-volatile memory such as ROM. It may also be written into erasable programmable read-only memory (EPROM), flash memory or one-time programmable memory.
Firmware installed in ROM or one-time programmable memory cannot be rewritten or updated. Also, this type of firmware is usually low-level firmware that's intrinsic to the device it is installed in. Firmware installed in flash memory can be updated and is therefore known as high-level firmware.
American computer scientist Ascher Opler is said to have coined the phrase firmware in a 1967 issue of the publication Datamation. He used the term to describe a type of microprogram in between hardware and software. Today, the term is considered a combination of two terms: firm and software. Firm, meaning embedded in hardware and not meant to be frequently updated and software, meaning software meant for a specific hardware device.
Firmware updates consist of code that tells the hardware how to behave in a new or modified way. Firmware updates are often issued to fix bugs, prevent firmware hacks, roll out new features, improve security or interact with new media.
Some examples of what might happen following firmware updates include the following:
Some internet-connected devices regularly check for new firmware and automatically download and install it. Other device manufacturers require the user to visit the manufacturer's website to download and install firmware updates manually.
The frequency of firmware updates will vary depending on the device. The firmware in a smart light bulb may not need frequent updates. However, the firmware on a smart thermostat may need to be updated periodically to remain compatible with smartphone OS updates. Smartphones commonly automate firmware upgrades alongside software updates, so the phone remains functional and users don't have to manually update firmware versions to coincide with software updates. The process of remotely updating firmware by downloading upgrades from the service provider is sometimes referred to as firmware over the air.
Many electronic devices also require that the device remains powered on while updating firmware so that the update doesn't get corrupted. Corrupting the firmware can damage some devices or cause them to malfunction. If the malfunction is permanent, the device may be damaged beyond repair. This is known as bricking, and is usually the result of damaged or deleted firmware.
There are many types of firmware, but all firmware can be sorted into three categories:
Firmware is found in a range of computing equipment, including complex devices. It is also included in devices not traditionally thought of as having computer control and in devices that are typically not considered computing devices. Some real-world applications of firmware include the following:
In addition to the previously listed, these devices also require firmware to operate as intended and to run user programs:
Embedded firmware is a crucial element of IoT devices and networks.
Firmware is a type of software. However, there are several distinctions between the two.
Firmware is software that provides basic machine instructions that allow the hardware to function and communicate with other software running on a device. Firmware provides low-level control for the various basic aspects of a specific piece of hardware, such as its startup, communication, interaction with the operating and other hardware, and so on. For this reason, it is sometimes called "software for hardware."
Another distinguishing feature is that firmware is not generally designed to be user friendly since end users usually don't interact it with directly. Also, firmware is not updated frequently. Most device manufacturers release firmware updates to address critical issues -- i.e., related to performance or security -- or to add new functionality.
Examples of firmware include BIOS and Extensible Firmware Interface.
Software is designed for users to interact with a device in order to accomplish specific tasks. It sits above the firmware, is abstracted from the hardware, and uses the firmware to communicate with the underlying hardware. Software is more complex and not as bound to the underlying hardware.
A software program can usually be updated, upgraded, patched and changed out without replacing a hardware component. This is rarely possible with firmware due to its embedded nature and permanent storage on a dedicated chip within the hardware itself.
Examples of software include operating systems, as well as applications for word processing, project management, video conferencing, data processing, business intelligence and customer relationship management.
Cyberattackers and hackers can take advantage of vulnerabilities in firmware to take control of the hardware it is embedded in. They can install malware into the device, steal data and spy on users and their online activities. If the vulnerabilities are not known to the device manufacturer, exploitation may result in a zero-day attack that's almost impossible to prevent and difficult to mitigate. Also, if the hardware device is connected to other devices, say over an IoT network, these issues can spread throughout the network and exacerbate the effects of the attack.
In addition to increased vulnerability to attack, poor firmware security can also do the following:
To avoid these problems, hardware vendors need to ensure that their devices are secure by design. They must also release security patches as soon as they detect vulnerabilities to protect firmware and device users.
Firmware embedded in flash memory chips can be updated more easily than firmware written to ROM or EPROM. As flash memory plays a bigger role in the enterprise, admins must learn about the types of flash and their use cases.
12 Nov 2024