Development of Secure Embedded System

We present a mind map linking the Secure Development Lifecycle phases to the IoTSF Security Assurance Framework and Arm PSA Certified. We have added icons that represent each section of our Embedded System Security for C/C++ Developers course to the branches, to give you a better idea of what to expect on the course.

Secure Microcontroller-based Product

Secure Design & Architecture

What needs protecting?

Sensitive data

Interlectual Property

Functionality

Reputation

Who/what do you need protecting from?

Threat Modelling

Attributes

Name	Value
IoTSF SAF	2.4.3.6
IoTSF SAF	2.4.3.10
PSA	Threat Models & Security Analysis
Microsoft SDL	Practice #4

BSIMM

STRIDE

Attack Trees

Common Criteria

Target of Evaluation

Protection Profile

Type of attacker

Motivation for attack

Attack mechanism

Insider attack

Side channel attack

Market (customer)

Security Awareness

Requirements & Expectations

Cost

Risk Assessment

Assurance Level

IoTSF SAF Class 0-4

Attributes

Name	Value
IoTSF SAF	2.2

PSA Certified Level 1-3

BSIMM

IoT SMM

CVSS

Security Goals

Attributes

Name	Value
Microsoft SDL	Practice #2

PSA

Attributes

Name	Value
PSA	Security Model Goals

Unique ID

Secure Lifecycle

Attestation

Secure Boot

Secure Update

Anti-Rollback

Isolation

Interaction across boundaries

Data binding

Services (crypto, etc)

Safety Requirements

Attributes

Name	Value
IoTSF SAF	2.4.5.24

Defences and countermeasures

Company level

Security Policy

Management governance

Attributes

Name	Value
IoTSF SAF	2.4.3

Chief Security Officer

Attributes

Name	Value
IoTSF SAF	2.4.3.1
IoTSF SAF	2.4.3.2

Security Framework

Attributes

Name	Value
IoTSF SAF	2.4.3.4

Security Requirements

Attributes

Name	Value
Microsoft SDL	Practice #2

Vulnerability Handling Process

Attributes

Name	Value
Microsoft SDL	Practice #12

ISO 30111

Attributes

Name	Value
IoTSF SAF	2.4.3.17

Vulnerability Reporting Policy

Attributes

Name	Value
IoTSF SAF	2.4.3.5
IoTSF SAF	2.4.3.21
Microsoft SDL	Practice #3

Vulnerability Disclosure Policy

Attributes

Name	Value
IoTSF SAF	2.4.3.7-9
IoTSF SAF	2.4.3.11-16

Security Updates

Attributes

Name	Value
IoTSF SAF	2.4.3.18-20
IoTSF SAF	2.4.3.22-23
IoTSF SAF	2.4.3.25
IoTSF SAF	2.4.3.29

Support Duration & Expectations

Attributes

Name	Value
IoTSF SAF	2.4.5.36

IoT Devices

Attributes

Name	Value
IoTSF SAF	2.4.5.39

SBOM

Attributes

Name	Value
IoTSF SAF	2.4.3.24
IoTSF SAF	2.4.3.26-28
Microsoft SDL	Practice #7

Shared Library Vulnerability Status

Attributes

Name	Value
IoTSF SAF	2.4.5.37

Training

Attributes

Name	Value
Microsoft SDL	Practice #1

Market - Competitors

Standards & Regulations

Frameworks

IoTSF SAF

Microsoft SDL

Certification

ETSI-EN 303 645

PSA Certified

Security Level

BSIMM

IoT SMM

CVSS

IoTSF SAF

PSA Certified

Secure supply chain & production

Attributes

Name	Value
IoTSF SAF	2.4.14

Encrypted design files held by 3rd party Escrow service

Attributes

Name	Value
IoTSF SAF	2.4.14.2

Process to ensure no duplicate devices

Attributes

Name	Value
IoTSF SAF	2.4.14.3-4

Securely controlled area for device provisioning

Attributes

Name	Value
IoTSF SAF	2.4.14.6

SBOM kept up to date

Attributes

Name	Value
IoTSF SAF	2.4.14.8

SBOM made available to customers where possible

Attributes

Name	Value
IoTSF SAF	2.4.14.25

Process to prevent IP theft, reverse engineering and production of unauthorised devices

Attributes

Name	Value
IoTSF SAF	2.4.14.15-18
IoTSF SAF	2.4.14.22

Signing keys held securely

Attributes

Name	Value
IoTSF SAF	2.4.14.19

End-of-life disposal service

Attributes

Name	Value
IoTSF SAF	2.4.14.23-24

Application level

Design Requirements

Attributes

Name	Value
Microsoft SDL	Practice #5

Secure data storage

Cryptography

Hashes

Certificates

SW Authentication

Attributes

Name	Value
IoTSF SAF	2.4.5.1

Dedicated key for signing

Attributes

Name	Value
IoTSF SAF	2.4.9.8

Secure data communications

Attributes

Name	Value
IoTSF SAF	2.4.7

Authentication

Unique passwords

Attributes

Name	Value
IoTSF SAF	2.4.7.7

Strong Authentication Mechanism

Attributes

Name	Value
IoTSF SAF	2.4.7.8

Synchronous & Asynchronous Encryption/Decryption

Message Validation

Key exchange/Generation

Attributes

Name	Value
IoTSF SAF	2.4.7.11

Transport Level Security

Attributes

Name	Value
IoTSF SAF	2.4.5.21

Secure Protocols & configuration

Attributes

Name	Value
IoTSF SAF	2.4.7.2
IoTSF SAF	2.4.7.4

WiFi Recommendations

Attributes

Name	Value
IoTSF SAF	2.4.7.10-11

Secured by TLS/DTLS

Attributes

Name	Value
IoTSF SAF	2.4.7.13-14

NIST recommendations for TLS

Attributes

Name	Value
IoTSF SAF	2.4.7.15
IoTSF SAF	2.4.7.19

Resilience to communications loss

Attributes

Name	Value
IoTSF SAF	2.4.7.17
IoTSF SAF	2.4.7.25

Permissions & Privileges

Attributes

Name	Value
IoTSF SAF	2.4.8

Passwords

No blank/default password

Attributes

Name	Value
IoTSF SAF	2.4.8.2-4

Strong password

Attributes

Name	Value
IoTSF SAF	2.4.8.5-6

Protection

Attributes

Name	Value
IoTSF SAF	2.4.8.7-9
IoTSF SAF	2.4.8.15

Reset/Revocation

Attributes

Name	Value
IoTSF SAF	2.4.8.12-14
IoTSF SAF	2.4.8.16

Least Privilege

Trust

Definition & Documentation

Attributes

Name	Value
IoTSF SAF	2.4.8.10

Standard Security Principles

Security Level

Appropriate cryptographic functions

Attributes

Name	Value
IoTSF SAF	2.4.9.6
Microsoft SDL	Practice #6

Appropriate key length

Attributes

Name	Value
IoTSF SAF	2.4.9.10

Sub-system Key Management

Attributes

Name	Value
IoTSF SAF	2.4.9.11

Web User Interface

Attributes

Name	Value
IoTSF SAF	2.4.10

Secure, authenticated access

Attributes

Name	Value
IoTSF SAF	2.4.10.1-4

Automatic idle logout

Attributes

Name	Value
IoTSF SAF	2.4.10.5

Strong password security

Attributes

Name	Value
IoTSF SAF	2.4.10.6-7
IoTSF SAF	2.4.10.17

Vulnerability assessment

Attributes

Name	Value
IoTSF SAF	2.4.10.9

Validated input & output data

Attributes

Name	Value
IoTSF SAF	2.4.10.10
IoTSF SAF	2.4.10.12
IoTSF SAF	2.4.10.15

Secure admin interface

Attributes

Name	Value
IoTSF SAF	2.4.10.13

Sensitive communications encrypted

Attributes

Name	Value
IoTSF SAF	2.4.10.19

Secure coding techniques applied

Attributes

Name	Value
IoTSF SAF	2.4.10.16

Simple interface for security update

Attributes

Name	Value
IoTSF SAF	2.4.10.18

Mobile Application

Attributes

Name	Value
IoTSF SAF	2.4.11

Unique, Strong & Secure Password

Attributes

Name	Value
IoTSF SAF	2.4.11.1-2
IoTSF SAF	2.4.11.5-6

Secure communication with server

Attributes

Name	Value
IoTSF SAF	2.4.11.4
IoTSF SAF	2.4.11.13

Validated input & output data

Attributes

Name	Value
IoTSF SAF	2.4.11.9

Secure admin interface

Attributes

Name	Value
IoTSF SAF	2.4.11.8

Secure coding techniques applied

Attributes

Name	Value
IoTSF SAF	2.4.11.10

Simple interface for security update

Attributes

Name	Value
IoTSF SAF	2.4.11.11

Authenticated access only

Attributes

Name	Value
IoTSF SAF	2.4.11.12

Privacy (Personal Information)

Attributes

Name	Value
IoTSF SAF	2.4.12

Minimize details stored

Attributes

Name	Value
IoTSF SAF	2.4.12.1

Data is encrypted

Attributes

Name	Value
IoTSF SAF	2.4.12.2

Access to data controlled

Attributes

Name	Value
IoTSF SAF	2.4.12.3

Anonymise where possible

Attributes

Name	Value
IoTSF SAF	2.4.12.4

Data retention policy

Attributes

Name	Value
IoTSF SAF	2.4.12.5

Data reporting/validation process

Attributes

Name	Value
IoTSF SAF	2.4.12.6-7

Standard-complient (e.g. GDPR)

Attributes

Name	Value
IoTSF SAF	2.4.12.8
IoTSF SAF	2.4.12.15

Clear end-user instructions

Attributes

Name	Value
IoTSF SAF	2.4.12.9-13

No unauthorized data collection

Attributes

Name	Value
IoTSF SAF	2.4.12.14

Cloud & Network Elements

Attributes

Name	Value
IoTSF SAF	2.4.13

Maintained security updates

Attributes

Name	Value
IoTSF SAF	2.4.13.1
IoTSF SAF	2.4.13.5-6

Valid TLS certificates

Attributes

Name	Value
IoTSF SAF	2.4.13.4

TLS renegotiation disabled

Attributes

Name	Value
IoTSF SAF	2.4.13.7

Unused IP ports disabled

Attributes

Name	Value
IoTSF SAF	2.4.13.8

mTLS requires trusted client certificate

Attributes

Name	Value
IoTSF SAF	2.4.13.9

Certificate pinning with TLS

Attributes

Name	Value
IoTSF SAF	2.4.13.10

Passwords follow best practice

Attributes

Name	Value
IoTSF SAF	2.4.13.11-14

Protection against brute force attack

Attributes

Name	Value
IoTSF SAF	2.4.13.15

Access control measures enforced

Attributes

Name	Value
IoTSF SAF	2.4.13.16-18

Cloud services meet current industry standards

Attributes

Name	Value
IoTSF SAF	2.4.13.19

Safety-critical services ensure continuity and availability

Attributes

Name	Value
IoTSF SAF	2.4.13.21

Input data validation

Attributes

Name	Value
IoTSF SAF	2.4.13.22

Communications with cloud secure & encrypted

Attributes

Name	Value
IoTSF SAF	2.4.13.23-24
IoTSF SAF	2.4.13.34-35

Controlled access to device ditigal twin in cloud

Attributes

Name	Value
IoTSF SAF	2.4.13.25

Key exchange required for device to access cloud services

Attributes

Name	Value
IoTSF SAF	2.4.13.26-27

Cloud service databases encrypted & access restricted

Attributes

Name	Value
IoTSF SAF	2.4.13.28-32

Connections monitored for malicious activity

Attributes

Name	Value
IoTSF SAF	2.4.13.33
IoTSF SAF	2.4.13.36

Configuration

Attributes

Name	Value
IoTSF SAF	2.4.15

Secure storage for parameters

Attributes

Name	Value
IoTSF SAF	2.4.15.1

Secure update should remove redundant parameters

Attributes

Name	Value
IoTSF SAF	2.4.15.2

Manufacturer guidance for secure configuration

Attributes

Name	Value
IoTSF SAF	2.4.15.3

Secure Update

Self-check for Updates

Attributes

Name	Value
IoTSF SAF	2.4.5.41

Platform level

Secure SW Architecture

Attributes

Name	Value
IoTSF SAF	2.4.5
IoTSF SAF	2.4.6

Privileged & non-privileged processes

Attributes

Name	Value
IoTSF SAF	2.4.5.15

Least possible privilege

Attributes

Name	Value
IoTSF SAF	2.4.6.9
IoTSF SAF	2.4.6.13

Secure & non-secure modes

Attributes

Name	Value
IoTSF SAF	2.4.6.11
PSA	Interaction over boundaries

SW Authentication

Attributes

Name	Value
IoTSF SAF	2.4.5.1

Dedicated key for signing

Attributes

Name	Value
IoTSF SAF	2.4.9.8

Isolation

Attributes

Name	Value
IoTSF SAF	2.4.6.12
PSA	Isolation

Physical separation

Trustzone

SW Attack Mitigations

Watchdog

Attributes

Name	Value
IoTSF SAF	2.4.5.6

Anti-Rollback

Attributes

Name	Value
IoTSF SAF	2.4.5.8
PSA	Anti-Rollback

Services (API)

Attributes

Name	Value
PSA	Services

Access control (passwords)

Not hard-coded

Attributes

Name	Value
IoTSF SAF	2.4.6.5

Secure comms

Attestation

Attributes

Name	Value
PSA	Attestation API

Secure Storage

Attributes

Name	Value
PSA	Protected Storage API

Clean-after-use Policy

Attributes

Name	Value
IoTSF SAF	2.4.5.33-34

No hard-coded security parameters

Attributes

Name	Value
IoTSF SAF	2.4.5.40

Crypto

Attributes

Name	Value
PSA	Cryptography API

No weak or deprecated functions

Attributes

Name	Value
IoTSF SAF	2.4.9.5

Appropriate Strength

Attributes

Name	Value
IoTSF SAF	2.4.9.6

Secure Update

Attributes

Name	Value
PSA	Secure Update API
IoTSF SAF	2.4.5.2-4

Partial Updates

Attributes

Name	Value
IoTSF SAF	2.4.5.25-26

Postponed Update

Attributes

Name	Value
IoTSF SAF	2.4.5.27

Update Authentication

Attributes

Name	Value
IoTSF SAF	2.4.5.29-30

Secure HW Architecture

Attributes

Name	Value
IoTSF SAF	2.4.4

Unique ID

Attributes

Name	Value
IoTSF SAF	2.4.8.1
PSA	Unique ID
IoTSF SAF	2.4.8.18

Silicon ID

OTP ROM

PUF

Secure storage

Attributes

Name	Value
IoTSF SAF	2.4.9

Encrypted memory

Key/Certificate storage

Attributes

Name	Value
IoTSF SAF	2.4.9.7

Isolated On-Chip Memory

Secure Element

TPM

HSM

Crypto accelerator for real-time code decryption

Clear-after-use Policy

Attributes

Name	Value
IoTSF SAF	2.4.5.34

Randomization

Attributes

Name	Value
IoTSF SAF	2.4.4.17

PUF

True Random Number Generator

Attributes

Name	Value
IoTSF SAF	2.4.9.2

Crypto engine

HW Root-of-Trust

Attributes

Name	Value
IoTSF SAF	2.4.4.2
IoTSF SAF	2.4.5.7

Attestation

Attributes

Name	Value
PSA	Attestation

Secure Boot

Attributes

Name	Value
IoTSF SAF	2.4.4.1-4
PSA	Secure Boot

Secure Update

Attributes

Name	Value
PSA	Secure Update

Anti-Rollback

Attributes

Name	Value
PSA	Anti-Rollback

Executable Memory Protection

Attributes

Name	Value
IoTSF SAF	2.4.4.18

MPU

Trustzone

HW Attack Mitigations

Attributes

Name	Value
IoTSF SAF	2.4.5.12

IoTSF Best Practice Guides

Validated RTC

Attributes

Name	Value
IoTSF SAF	2.4.8.2

Secure MCUs

Attributes

Name	Value
PSA	Isolation

Multi-core

PSoC6

Azure Sphere

Armv8-M

SAU

IDAU

Secure Gateway

Secure SP, SysTick, etc

Implementation

Secure Software

SW Engineering Best Practice

Attributes

Name	Value
IoTSF SAF	2.4.5.13

Approved Coding Standards

Build process

Attributes

Name	Value
IoTSF SAF	2.4.5.16-18
Microsoft SDL	Practice #8

No hard-coded parameters

Attributes

Name	Value
IoTSF SAF	2.4.5.40

Secure coding

CVE/CWE

CERT C

MISRA C

Static Analysis

Attributes

Name	Value
IoTSF SAF	2.4.5.14
Microsoft SDL	Practice #9

Secure Platform

Secure Interfaces

Close unused ports

Attributes

Name	Value
IoTSF SAF	2.4.7.6

Unused protocols/services disabled

Attributes

Name	Value
IoTSF SAF	2.4.7.18

Verification

Dynamic Analysis

Attributes

Name	Value
Microsoft SDL	Practice #10

Unit tests

Fuzz Testing

Attributes

Name	Value
IoTSF SAF	2.4.5.23

Maintenance Update Testing

Attributes

Name	Value
IoTSF SAF	2.4.5.38

Release

Final Security Review

Penetration Testing

Attributes

Name	Value
Microsoft SDL	Practice #11

Simple/Differential Power Analysis Attacks

Reverse Engineering

Attributes

Name	Value
IoTSF SAF	2.4.4.8

Manufacture

Provisioning keys/certificates

Attributes

Name	Value
IoTSF SAF	2.4.4.14
IoTSF SAF	2.4.14.9

Key access control

Attributes

Name	Value
IoTSF SAF	2.4.5.19-20

Keys for Updates

Attributes

Name	Value
IoTSF SAF	2.4.5.32

Secure Provisioning Process

Attributes

Name	Value
IoTSF SAF	2.4.9.3-4
IoTSF SAF	2.4.9.9

Code encryption & signing

Attributes

Name	Value
IoTSF SAF	2.4.4.13
IoTSF SAF	2.4.5.9

Clean code

Removal of symbols, debug & test code

Attributes

Name	Value
IoTSF SAF	2.4.5.10-11
IoTSF SAF	2.4.14.1

Removal of sensitive data

Attributes

Name	Value
IoTSF SAF	2.4.5.12

Physical security

Locking JTAG/Debug

Attributes

Name	Value
IoTSF SAF	2.4.4.5
IoTSF SAF	2.4.4.10

Tamper detection

Attributes

Name	Value
IoTSF SAF	2.4.4.6-7

Unused ports secure

Attributes

Name	Value
IoTSF SAF	2.4.4.9

Production testing

Processor only run from secure boot

Attributes

Name	Value
IoTSF SAF	2.4.14.5

RoT ID authenticated by authorised agent

Attributes

Name	Value
IoTSF SAF	2.4.14.10

RoT ID logged throughout supply chain

Attributes

Name	Value
IoTSF SAF	2.4.14.12

Clone detection & removal

Attributes

Name	Value
IoTSF SAF	2.4.14.3

Certification

PSE Certified

Attributes

Name	Value
PSA	Threat Models & Security Analysis

FIPS 140-3

ETSI EN 303-645

ETSI TS 103-701

NIST 8259A

SESIP

Runtime Defence & Monitoring

Vulnerability Disclosure Program

Vulnerability Response

Attributes

Name	Value
Microsoft SDL	Practice #12

Communication Protocol Upgrades

Attributes

Name	Value
IoTSF SAF	2.4.7.20

Secure Update

Replacement where update not possible

Attributes

Name	Value
IoTSF SAF	2.4.5.22

Secure Debug

Attack Recovery

Return to known good state

Attributes

Name	Value
IoTSF SAF	2.4.8.17

Tamper Detection

Attributes

Name	Value
IoTSF SAF	2.4.4.11

Watchdog Timer

Attributes

Name	Value
IoTSF SAF	2.4.4.15

Secure Disposal/Transfer of Ownership

Attributes

Name	Value
IoTSF SAF	2.4.16

Deletion of sensitve data

Attributes

Name	Value
IoTSF SAF	2.4.5.35
IoTSF SAF	2.4.12.11

Manufacturer procedure documentation

Attributes

Name	Value
IoTSF SAF	2.4.16.1-2

GDPR

Keys & Certificates

Financial

Reverse engineering prevention

Attributes

Name	Value
IoTSF SAF	2.4.4.8
IoTSF SAF	2.4.4.13
IoTSF SAF	2.4.16.3

Decommission/Recommission process

Attributes

Name	Value
IoTSF SAF	2.4.16.4

Secure device registration

Attributes

Name	Value
IoTSF SAF	2.4.16.5

User identity protection

Attributes

Name	Value
IoTSF SAF	2.4.16.6

Previous user data/settings erased

Attributes

Name	Value
IoTSF SAF	2.4.16.7

Unauthorised reuse