Safety and security

Secure Embedded Systems

What are safety and security in embedded systems?

Cybersecurity and functional safety work together in connected products and industrial IoT. The EU Cyber Resilience Act (CRA) and standards such as IEC 62443, IEC 61508 and ISO 26262, alongside ETSI EN 303 645 and NIS2, set a common goal: prevent hazards, withstand attacks and keep devices dependable for their whole lifetime, from concept and development through to updates in the field.

Which building blocks do modern platforms provide?

Silicon vendors and open-source projects ship most of the foundations: secure boot chains (TF-A/U-Boot, HAB/AHAB, SBSFU/TF-M), isolation through TrustZone-M and OP-TEE, and Linux hardening features such as SELinux/AppArmor, dm-verity/IMA, namespaces and seccomp. On the safety side, MISRA/CERT coding rules, static analysis, FMEA/FTA, watchdogs and CRC/ECC catch faults early, without slowing development down.

What do our training courses cover?

Our Ac6 courses walk through the whole ecosystem: risk and threat analysis, SBOM/VEX and vulnerability handling, key management, secure update and rollback, Linux and MCU hardening, TrustZone partitioning, and the safety lifecycle with the evidence an assessor expects, including plans, traceability and the safety case. You leave able to build products that are both secure and safe, and ready for a real assessment.

Available Courses

C1Effective MISRA COutline
MISRA C:2023, the latest version of the MISRA C standard, which includes guidelines for safety and security supporting all published versions of the C standard. The course has been designed for the smooth and successful adoption of MISRA C into an organization. Lectures, exercises, tests, hands-on sessions and, optionally, a final exam, will significantly strengthen the skills and competences of teams involved in the design, development and verification of critical embedded software systems.
C2MISRA Compliance for Project ManagersOutline
MISRA for Project Managers, provides essential insights for managers overseeing projects that require MISRA compliance. It highlights the importance of MISRA standards in safety-critical systems across various industries. The training emphasizes key aspects such as negotiation, planning, execution, and assessment of MISRA compliance, and equips managers with the knowledge to make informed decisions. By enhancing managerial awareness and skills, it ensures better project outcomes, reduced costs, and improved code quality. This training is invaluable for project leaders seeking to streamline MISRA integration and enhance organizational efficiency.
SEC10Cyber Resilience Act (CRA) for Embedded SystemsOutline
This course provides embedded system developers and cybersecurity professionals with an in-depth understanding of the Cyber Resilience Act and its impact on digital products. Participants will learn essential cybersecurity requirements, explore compliance pathways, and discover practical strategies for securing embedded systems throughout their lifecycle. The course also highlights market-ready tools and solutions to ensure adherence to the regulation while enhancing product resilience.
SEC1Secure C/C++ Development for Embedded SystemsOutline
This course provides an introduction to embedded security and covers relevant industry standards. It includes secure coding practices for C/C++, principles of secure-by-design implementation for embedded hardware architectures and communication protocols. Additionally, it offers an overview of security best practices for IoT devices and systems.
SEC2Advanced Embedded Systems SecurityOutline
The objectives of this course include learning how to manipulate files and directories securely, protect programs from malicious user input, and understand embedded system hardware features for security. Attendees will also learn about a secure software development methodology and framework, gain an understanding of the context and use of hypervisors and system virtualization, and become familiar with security checks and tools. These topics are essential for the development of secure systems software and are applicable to a wide range of applications.
SEC12Comprehensive Secure Systems ProgrammingOutline
The oSEC12 course is designed for software engineers that need to design and program secure systems. This course is a combination of oSEC1 - Secure C/C++ Development for Embedded Systems course and oSEC2 - Advanced Embedded Systems Security course, with a special price when both consecutive sessions are booked at once.
SEC5Embedded Security for STM32-based devicesOutline
This course is designed to teach you about the security challenges faced by embedded systems and STM32-based devices. You will learn how to identify potential attack vectors and threats and understand the latest security standards and best practices for embedded systems. You will also learn about secure boot and firmware protection mechanisms and how to implement them.
SEC6Embedded Security for NXP i.MX-based processorsOutline
This course teaches the security challenges of embedded systems and NXP-based devices, covers latest security standards and best practices, and explains how to implement secure boot, network protocols, IoT security, and firmware updates.
SEC7ARM TrustZone for Cortex-M based devicesOutline
This course aims to provide an in-depth understanding of the ARM v8-M architecture and its security features. It covers topics such as the Memory Protection mechanism, Security Attribution unit configuration, management of Security access faults, and building and debugging secure and non-secure software. The objective is to equip attendees with the necessary knowledge and skills to develop secure applications for ARM v8-M based systems.
SEC8Secured Embedded Linux Platform BuildOutline
SEC9Advanced Embedded Linux SecurityOutline
C8Critical Systems SafetyOutline
Embedded systems are more and more critical and subject to safety constraints. This training introduces the main concepts and standards applicable to safety-critical systems.