MITRE, Red Balloon Security, and Narf Announce EMB3D™ – A Threat Model for Critical Infrastructure Embedded Devices
Retrieved on:
Wednesday, December 13, 2023
Technology, Security, Health Technology, Software, Networks, Government Technology, Hardware, Health, Defense, MITRE, Threat model, Research, CISA, Common Weakness Enumeration, Common Vulnerability Scoring System, Public sector, Natural gas, Red Balloon, Operational technology, ICS, Onega, Russia, Risk management
Sophisticated cyber adversaries increasingly attempt to exploit these devices, as evidenced by a growing number of CISA ICS advisories identifying significant threats to many life- and safety-critical devices.
Key Points:
- Sophisticated cyber adversaries increasingly attempt to exploit these devices, as evidenced by a growing number of CISA ICS advisories identifying significant threats to many life- and safety-critical devices.
- The EMB3D™ Threat Model, a collaborative effort by MITRE , Niyo Little Thunder Pearson ( ONEGas, Inc.), Red Balloon Security , and Narf Industries , provides a common understanding of the threats posed to embedded devices and the security mechanisms required to mitigate them.
- These threats are mapped to device properties to help users develop and tailor accurate threat models for specific embedded devices.
- “Together, we are committed to enhancing the cyber posture of critical infrastructure sectors that rely on Operational Technology (OT) technologies.