Français
8. Conclusion
Embedded system security is a crucial issue for industry and end-users alike. But embedded systems are under threat from all sides. This article reviews the main software, physical and blended threats targeting embedded systems. It has presented some of the main protection strategies from system level (software and hardware) to the lowest physical level. The wide range of protections may lead one to believe that securing an embedded system is a simple matter. Unfortunately, even if the protections presented sometimes respond effectively to a specific threat, none of them can claim to provide complete system security. There's no magic formula for securing an embedded system, and each new case requires upstream reflection to select the right protections as early as possible, in line with a properly defined threat model. This is why security should not be, or should no longer be, considered...
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Conclusion
Glossary
Bibliography
Websites
Collection of reverse engineering examples for integrated circuits
Agence Nationale pour la Sécurité des Systèmes d'Information – ANSSI
French security solutions awarded France...
Events
Conference on Cryptographic Hardware and Embedded Systems (CHES) https://ches.iacr.org/
IEEE International Symposium on hardware Oriented Security and Trust (HOST) http://www.hostsymposium.org/
International Workshop on cryptographic Architectures...
Standards and norms
- Advanced Encryption Standard (AES), Federal Information Processing Standards Publication (FIPS) 197, nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197.pdf - FIPS197 - 2001
- ARM Security Technology. Building a secure system using trustzone technology. ARM Limited. - PRD29-GENC-009492C - 2005-2009
- Standard Test Access Port and Boundary – Scan Architecture. - IEEE 1149.1 - 2013
Directory
Manufacturers – Suppliers – Distributors (non-exhaustive list)
Rambus, holder of numerous patents on covert channel attacks (ex-Cryptography Research) https://www.rambus.com/security/
French CESTIs approved to evaluate embedded electronic systems: Serma Safety & Security
The Ultimate Scientific and Technical Reference
