Security Advanced: Proven Practices for Hardware Implementations

This workshop provides practical knowledge on hardware security in industrial, automotive, and medical technology environments:

• Building security expertise in hardware development
• Early identification of security-critical vulnerabilities in the design
• Security-conscious component selection and system architecture
• Foundation for meeting regulatory and standards-based requirements (e.g., CRA, ISO/SAE 21434, IEC 62443)
• Improving collaboration between hardware, firmware, and software teams

Objectives and Benefits

You will learn how attacks on hardware and embedded systems work—and how they can be prevented through appropriate design measures, circuit architecture, component selection, and system integration. The focus is on awareness, practical implementation, and the integration of security into existing development processes.

Agenda

• Introduction to the Basic Principles of Hardware Security (e.g., Trusted Computing, Hardware Root of Trust, Secure Boot, TPM, PUF, Secure Elements)
• Overview of Typical Types of Attacks on Hardware:
• • Physical Attacks (Side Channel, Fault Injection, Reverse Engineering)
  • Communication Attacks (Bus Sniffing, Replay, Spoofing)
  • Supply Chain Manipulation
• Design Principles for Secure Hardware:
• • Secure Partitioning and Isolation
  • Tamper Detection and Mitigation
  • Protection of Sensitive Data (e.g., keys in the Secure Element or MCU flash)
• Integration of Security into the Development Process (Shift Left):
• • Security Requirements in System Architecture
  • Threat Analysis at the Hardware Level
  • Security Reviews of Schematics and Layouts
  • Collaboration with Firmware/Software Security
• Introduction to Relevant Standards:
• • IEC 62443-4-1 / -4-2 (Industrial Components)
  • ISO/SAE 21434 (Automotive)
  • IEC 81001-5-1 (Medical Devices)
• Practical examples:
• • Evaluation of microcontrollers and SoCs based on security features
  • Case studies: Attacks and countermeasures for bus systems (CAN, SPI, I²C, UART)
  • Introduction to security testing approaches (e.g., fault injection, glitching)

Target Audience

Hardware developers (electronics, embedded systems, FPGA, PCB design), system architects and integrators, development managers, security champions, and quality managers

Prerequisites

• Basic knowledge of electronics development and system integration
• Optional: Access to sample hardware, schematics, or security concepts from customer projects
• Willingness to collaborate across disciplines with software teams