Engineering Secure Devices: A Practical Guide for Embedded System Architects and Developers

This practical guide to building embedded and IoT devices securely is an essential resource for current and future developers tasked with protecting users from the potential threats of these ubiquitous devices.As an engineer, you know that countless devices—from industrial components to smart household appliances—rely on embedded computer systems. But how do you balance the need for robust security with performance and innovative product design?Engineering Secure Devices will guide you through crafting secure devices—from protecting crucial assets to the nature of attackers and the risks they pose. You’ll explore the technical intricacies and pros and cons of symmetric and asymmetric cryptography and learn how to use and analyze random number generators and cryptographic algorithms. You’ll learn how to ensure confidential data storage and secure memory, and devise secure device identity solutions and communication protocols to reinforce system architecture against potential threats. And finally, you’ll learn how to properly design secure boot and secure update processes, manage access control, and perform system monitoring to secure IoT devices.Real-world case studies throughout highlight practical applications, solutions, and obstacles, such as firmware updates with SWUpdate, secure communication with MQTT, and advanced access control with AppArmor.You’ll also dig into topics like:Analyzing the performance of cryptographic implementations in both hardware and softwareConsiderations for secure boot and software update processes to ensure ongoing firmware integrityDesigning robust device architectures that withstand attacks while maintaining critical operationsDeveloping strategies to detect and respond to anomalies or security breaches in embedded systemsWhether you’re an IoT developer or an embedded system architect, Engineering Secure Devices equips you with the indispensable knowledge to design, secure, and support the next generation of smart devices—from webcams to four-legged robots.About the AuthorDominik Merli is a professor of IT Security at the Augsburg Technical University of Applied Sciences, with over a decade of experience in security engineering for industrial, automotive, and semiconductor sectors at companies like Fraunhofer and Siemens. He holds a master’s of engineering degree from Ulster University and a doctorate from the Technical University of Munich.