Critical infrastructure depends on embedded devices across industries such as oil and natural gas, electric, water management, automotive, medical, satellite, autonomous systems, and unmanned aircraft systems.
These devices often lack proper security controls and are insufficiently tested for vulnerabilities.
Cyber adversaries increasingly attempt to exploit these devices, as evidenced by a growing number of CISA ICS advisories identifying significant threats to many life- and safety-critical devices.
The EMB3D Threat Model, a collaborative effort by MITRE, Niyo Little Thunder Pearson, Red Balloon Security, and Narf Industries, provides a common understanding of the threats posed to embedded devices and the security mechanisms required to mitigate them.
EMB3D aligns with and expands on several existing models, including Common Weakness Enumeration, MITRE ATT&CK, and Common Vulnerabilities and Exposures, but with a specific embedded device focus.
EMB3D provides a cultivated knowledge base of cyber threats to devices, including those observed in the field environment or demonstrated through proofs-of-concept and/or theoretic research.
These threats are mapped to device properties to help users develop and tailor accurate threat models for specific embedded devices.
For each threat, suggested mitigations are exclusively focused on technical mechanisms that device vendors should implement to protect against the given threat with the goal of building security into the device.
EMB3D is intended to offer a comprehensive framework for the entire security ecosystem-device vendors, manufacturers, asset owners, security researchers, and testing organizations.
EMB3D is intended to be a living framework, where new threats and mitigations are added and updated over time as new threat actors emerge and security researchers discover new categories of vulnerabilities, threats, and security defenses.
Anticipated to be released in early 2024, EMB3D will be a public community resource, where all information is openly available, and the security community can submit additions and revisions.
This Cyber News was published on www.helpnetsecurity.com. Publication date: Thu, 14 Dec 2023 09:13:04 +0000