Safety and security
Embedded security
What are safety and security in embedded systems?
Cybersecurity and functional safety work together in connected products and industrial IoT. The EU Cyber Resilience Act (CRA) and standards such as IEC 62443, IEC 61508 and ISO 26262, alongside ETSI EN 303 645 and NIS2, set a common goal: prevent hazards, withstand attacks and keep devices dependable for their whole lifetime, from concept and development through to updates in the field.
Which building blocks do modern platforms provide?
Silicon vendors and open-source projects ship most of the foundations: secure boot chains (TF-A/U-Boot, HAB/AHAB, SBSFU/TF-M), isolation through TrustZone-M and OP-TEE, and Linux hardening features such as SELinux/AppArmor, dm-verity/IMA, namespaces and seccomp. On the safety side, MISRA/CERT coding rules, static analysis, FMEA/FTA, watchdogs and CRC/ECC catch faults early, without slowing development down.
What do our training courses cover?
Our Ac6 courses walk through the whole ecosystem: risk and threat analysis, SBOM/VEX and vulnerability handling, key management, secure update and rollback, Linux and MCU hardening, TrustZone partitioning, and the safety lifecycle with the evidence an assessor expects, including plans, traceability and the safety case. You leave able to build products that are both secure and safe, and ready for a real assessment.
Available Courses
This course provides embedded system developers and cybersecurity professionals with an in-depth understanding of the Cyber Resilience Act and its impact on digital products. Participants will learn essential cybersecurity requirements, explore compliance pathways, and discover practical strategies for securing embedded systems throughout their lifecycle. The course also highlights market-ready tools and solutions to ensure adherence to the regulation while enhancing product resilience.
This course provides an introduction to embedded security and covers industry standards such as ISO/SAE 21434, IEC 62443, NIST SP 800-53, Common Criteria, and OWASP. It covers secure coding practices for C/C++ and introduces the RUST programming language with its built-in security features. Students will learn about secure software development methodologies, security testing, and cryptography in embedded systems. The course covers the design and implementation of secure embedded system hardware architecture and communication protocols. Additionally, it provides an overview of security best practices for IoT devices and systems.
The oSEC12 course is designed for software engineers that need to design and program secure systems. This course is a combination of oSEC1 - Secure C/C++ Development for Embedded Systems course and oSEC2 - Advanced Embedded Systems Security course, with a special price when both consecutive sessions are booked at once.
Discover how to protect your programs from malicious user input, Secure System Software and Consideration, Apprehend the context and the use of Hypervisors and System Virtualization and Discover Security checks and Tools
MISRA C:2023, the latest version of the MISRA C standard, which includes guidelines for safety and security supporting all published versions of the C standard. The course has been designed for the smooth and successful adoption of MISRA C into an organization. Lectures, exercises, tests, hands-on sessions and, optionally, a final exam, will significantly strengthen the skills and competences of teams involved in the design, development and verification of critical embedded software systems.
MISRA for Project Managers, provides essential insights for managers overseeing projects that require MISRA compliance. It highlights the importance of MISRA standards in safety-critical systems across various industries. The training emphasizes key aspects such as negotiation, planning, execution, and assessment of MISRA compliance, and equips managers with the knowledge to make informed decisions. By enhancing managerial awareness and skills, it ensures better project outcomes, reduced costs, and improved code quality. This training is invaluable for project leaders seeking to streamline MISRA integration and enhance organizational efficiency.
This course is designed to teach you about the security challenges faced by embedded systems and STM32-based devices. You will learn how to identify potential attack vectors and threats and understand the latest security standards and best practices for embedded systems. You will also learn about secure boot and firmware protection mechanisms and how to implement them on STM32-based devices. Additionally, the course will cover the principles of secure network communication and how to implement secure network protocols such as TLS/SSL, LoRaWAN, Sigfox, and WiFi security on STM32-based devices. The course will also cover best practices for IoT security and how to implement them on STM32-based devices at different layers of communication. Finally, you will understand the fundamentals of firmware update and management and how to implement secure firmware update processes and OTA updates on STM32-based devices.
This course teaches the security challenges of embedded systems and NXP-based devices, covers latest security standards and best practices, and explains how to implement secure boot, network protocols, IoT security, and firmware updates.
This course aims to provide an in-depth understanding of the ARM v8-M architecture and its security features. It covers topics such as the Memory Protection mechanism, Security Attribution unit configuration, management of Security access faults, and building and debugging secure and non-secure software. The objective is to equip attendees with the necessary knowledge and skills to develop secure applications for ARM v8-M based systems.
This course equips embedded and OT teams with a clear, practical understanding of the NIS2 directive and its impact on critical digital services. Participants will grasp core obligations (Art. 21/23), map requirements to engineering workflows, and apply incident reporting timelines. The program also spotlights proven tools, supplier practices, and evidence-building techniques to accelerate compliance and strengthen operational resilience.
Embedded systems are more and more critical and subject to safety constraints. This training introduces the main concepts and standards applicable to safety-critical systems.