Security Advanced: Proven Practices for Hardware Implementations

This workshop provides practical knowledge of hardware security in industrial, automotive and medical settings. Participants learn how attacks on hardware and embedded systems work, and how to prevent them through suitable design measures, circuit architecture, component choice and system integration. The focus is on awareness, practical implementation and integrating security into existing development processes.

Content:

• Introduction to the basic principles of hardware security (e.g. trusted computing, hardware root of trust, secure boot, TPM, PUF, secure elements)
• Overview of typical types of attack on hardware:
• • Physical attacks (side channel, fault injection, reverse engineering)
  • Communication attacks (bus sniffing, replay, spoofing)
  • Supply chain manipulation
• Design principles for secure hardware:
• • Secure partitioning and isolation
  • Tamper detection and mitigation
  • Protecting sensitive data (e.g. keys in the secure element or MCU flash)
• Integrating security into the development process (shift left):
• • Security requirements in the system architecture
  • Threat analysis at hardware level
  • Security reviews of schematics and layouts
  • Collaboration with firmware and software security
• Overview of relevant standards:
• • IEC 62443-4-1 / -4-2 (industrial components)
  • ISO/SAE 21434 (automotive)
  • IEC 81001-5-1 (medical devices)
• Practical examples:
• • Assessing microcontrollers and SoCs by their security features
  • Case studies: attacks on and countermeasures for bus systems (CAN, SPI, I²C, UART)
  • Introduction to security testing approaches (e.g. fault injection, glitching)

Benefit:

• Building security expertise in hardware development
• Identifying safety-critical weaknesses early in the design
• Security-aware component selection and system architecture
• A basis for meeting regulatory and normative requirements (e.g. CRA, ISO/SAE 21434, IEC 62443)
• Better collaboration between hardware, firmware and software teams

Target audience:

• Hardware developers (electronics, embedded systems, FPGA, PCB design)
• System architects and integrators
• Development leads, security champions and quality managers

Prerequisites:

• Basic knowledge of electronics development and system integration
• Optional: access to example hardware, schematics or security concepts from customer projects
• Willingness to collaborate across disciplines with software teams