Training · Embedded security

Security and cybersecurity fundamentals for embedded systems.

Training born in the field, not on slides. Years of real projects between silicon and cloud, distilled into a method for designing connected devices that stay secure across their whole life cycle.

The approach

Method before content

Secure by design, for real

Threat modeling and secure life cycle applied to real products, with real constraints: cost, time, hardware already chosen.

What actually happened

From the attacks that made IoT history to the lessons too many products still ignore.

Ready before the deadlines

ETSI EN 303 645, Cyber Resilience Act, EN 18031: the regulations that matter for the industrial IoT market, what they actually require and how to be prepared.

The paths

Three ways to start

Available now · Udemy

The EU Cyber Resilience Act, in plain English

The whole Cyber Resilience Act in about fifty minutes, for the people who design, build and sell connected products. Six short modules, each with a downloadable tool you can use right away. No legal background required.

Go to the course on Udemy

Purchase and access are handled by Udemy.

In the works

Embedded security video course

A video course based on this training is in the works. Leave your email and you'll be the first to hear when it launches.

Something went wrong: please check the address and try again.

✓You're on the list. I'll write as soon as the course goes live.

No spam, no sharing with third parties. By using this form you accept the privacy policy.

On request

In-company training

The course is also available as a live version for development teams, with dedicated sessions and examples tailored to your product and sector.

Request a session
Course extract

Eight slides to understand the approach

The method and style of the in-company course and the video course, previewed. Swipe to browse.

Lesson 1 cover slide
01 / Lesson 1 cover
Course slide: the attack surface grows
02 / The attack surface
Pop quiz

An attacker quietly alters the configuration of an industrial gateway. The equipment keeps running.

Which CIA property has been violated?

ConfidentialityIntegrityAvailability
03 / Pop quiz
Real case

My friend Cayla

2017. The connected doll that listened to children, and to anyone else within Bluetooth range. Banned in Germany as an espionage device.

04 / Real case · divider
? Question

A gate remote can be cloned in a minute. How do we design one that can't be?

05 / Question slide
Secure lifecycle
06 / Secure lifecycle diagram
Threat modeling · STRIDE
SSpoofingfake identity
TTamperingunauthorised changes
RRepudiationuntraceable actions
IInformation Disclosuredata leakage
DDenial of Serviceunavailability
EElevation of Privilegeexcessive privileges
07 / Threat modeling · STRIDE
Standards and regulations Relevant to the industrial IoT market
  • ETSI EN 303 645The security baseline for consumer IoT
  • Cyber Resilience ActMandatory EU requirements for products with digital elements
  • EN 18031The harmonised standard for the RED cybersecurity requirements
08 / Standards and regulations
Let's talk

Do you have a connected product to secure?

Training is the starting point. If you have a project under way, a regulatory requirement to deal with or a team that needs to work securely, write to me and we'll talk it through.

Write me · info@maber-solutions.it