Get in Touch

Course Outline

Introduction

  • General security versus embedded systems security

Characteristics of Embedded Application Security

  • Network transactions in embedded systems
  • Automotive security
  • Security on Android devices
  • Next-generation software-defined radio

Critical Aspects of an Embedded System

  • Microkernel versus monolithic architectures
  • Independent security levels
  • Core security requirements
  • Access control mechanisms
  • I/O virtualization

Conducting Threat Modeling and Assessment

  • Identifying attackers and assets
  • Defining the attack surface
  • Utilizing attack trees
  • Establishing a security policy

Developing Secure Embedded Software

  • Principles of secure coding
  • Secure program design
  • Minimal implementation strategies
  • Component architecture
  • Principle of least privilege
  • Secure development lifecycle
  • Validation by independent experts
  • Model-driven design
  • Code reviews and static analysis
  • Security testing
  • Peer code reviews

Understanding and Implementing Cryptography

  • Cryptographic modes
  • Cryptographic hash functions
  • Cryptographic certifications
  • Key management
  • Block ciphers
  • Message Authentication Codes
  • Random Number Generation

Data Protection

  • Protocols for data in motion
  • Securing data in motion
  • Protocols for data at rest
  • Securing data at rest

Mitigating Attacks

  • Common software vulnerabilities
  • Preventing side-channel attacks

Integrating Security into Existing Projects

  • Securing bootloaders and firmware updates

Summary and Next Steps

Requirements

  • Experience with embedded systems development.

Target Audience

  • Professionals in embedded systems
  • Security specialists
 21 Hours

Number of participants


Price per participant

Upcoming Courses

Related Categories