InfoSecBulletin Cybersecurity for mankind
Red Balloon Security, Narf Industries, and MITRE worked together to develop the EMB3D Threat Model. This model helps us understand the risks that embedded devices face and the security measures they require. The EMB3D model is a framework that focuses on embedded devices.
“It considers the specific risks presented by embedded systems, including their varied operating environments and potential vulnerabilities to proofs-of-concept and theoretical research.”ms, including their diverse field environments and the ways in which they can be exploited through proofs-of-concept and theoretical research.
In short, the EMB3D model is a powerful tool to identify and address security risks in embedded devices in various contexts.
CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed
ALERT
Thousands of IP addresses compromised nationwide: CIRT warn
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks
Critical RCE Flaw Patched in Roundcube Webmail
Hacker claim Leak of Deloitte Source Code & GitHub Credentials
CISA Issued Guidance for SIEM and SOAR Implementation
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora
Australia enacts mandatory ransomware payment reporting
Why Govt Demands Foreign CCTV Firms to Submit Source Code?
EMB3D Threat Model For Embedded Devices
EMB3D framework aims to provide a complete solution for everyone involved in the security ecosystem, such as asset owners, manufacturers, device vendors, security researchers, and testing companies.
The framework helps make security assessments of devices, systems, and networks easier and more effective. It ensures that everyone involved can access the information and tools needed for thorough assessments.
The document provides technical specifications, testing methods, and guidelines for reporting and fixing vulnerabilities. Its purpose is to improve security and trust in the constantly changing world of connected devices and systems.
ICS device manufacturers can leverage the EMB3D model to gain early insights into the evolving threat landscape and available mitigation strategies, thereby facilitating the development of more robust and secure devices.
“The EMB3D framework stands as a perfect example of MITRE’s role as both an innovator and a connector, working hand-in-hand with industry leaders to develop cutting-edge tools,” said Beth Meinert, senior vice president and general manager.
EMB3D is expected to launch in early 2024. It will be an open community platform for the security community to contribute to updates and modifications.
