Security Hardware: Secure Implementation Practices
Understanding hardware security and implementing protective measures
The workshop provides practical knowledge on hardware security in industrial, automotive and medical technology environments. Participants learn how attacks on hardware and embedded systems work – and how they can be prevented through appropriate design measures, circuit architecture, component selection and system integration. The focus is on awareness, practical implementation and the integration of security into existing development processes.
Contents:
- Introduction to basic principles of hardware security (e.g. trusted computing, hardware root of trust, secure boot, TPM, PUF, secure elements)
- Overview of typical types of attacks on hardware:
- Physical attacks (side channel, fault injection, reverse engineering)
- Communication attacks (bus sniffing, replay, spoofing)
- Supply chain manipulation
- Design principles for secure hardware:
- Secure partitioning and isolation
- Tamper detection and mitigation
- Protection of sensitive data (e.g. keys in secure elements or MCU flash)
- Integration of security into the development process (shift left):
- Security requirements in system architecture
- Threat analysis at hardware level
- Security reviews of circuit diagrams and layouts
- Collaboration with firmware/software security
- Presentation of relevant standards:
- IEC 62443-4-1 / -4-2 (industrial components)
- ISO/SAE 21434 (automotive)
- IEC 81001-5-1 (medical devices)
- Practical examples:
- Evaluation of microcontrollers and SoCs according to security features
- Case studies: Attacks and countermeasures on bus systems (CAN, SPI, I²C, UART)
- Introduction to security testing approaches (e.g. fault injection, glitching)
Benefits
- Building security expertise in hardware development
- Early identification of security-critical vulnerabilities in design
- Security-conscious component selection and system architecture
- Basis for meeting regulatory and normative requirements (e.g. CRA, ISO/SAE 21434, IEC 62443)
- Improvement of collaboration between hardware, firmware and software teams
Target group:
- Hardware engineers (electronics, embedded systems, FPGA, PCB design)
- System architects and integrators
- Development managers, security champions and quality managers
Previous Knowledge:
- Basic knowledge of electronics development and system integration
- Optional: Access to sample hardware, circuit diagrams or safety concepts from customer projects
- Willingness to collaborate with software teams in an interdisciplinary manner
Duration
1 day
Optional extension:
2-day workshop with practical exercises and case studies