Threat Model for Embedded Devices—EMB3D™ (T20b)
How do product developers keep up with the latest threats and associated mitigations as they design/update a device? How do they inform end-users about whether the device includes necessary features? This talk introduces MITRE EMB3D™ (emb3d.mitre.org), a threat model with mitigations designed for embedded device vendors, asset owners/operators, test organizations, and security researchers. It will also explore how EMB3D™ provides technical mitigations that map to the Cyber Resilience Act (CRA) cybersecurity requirements