OWASP Embedded Application Security

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Embedded Application Security Purpose: Each year, the number of enterprise and consumer devices with embedded software are on the rise. Given the publicity with IoT and more devices becoming network connected, it is crucial that guidelines form OWASP on embedded software should be created. Embedded Application Security is not often a high priority for embedded devices such as Routers, Managed Switches, IoT devices, and even ATM Kiosks. There are many challenges in the embedded field including ODM supply chain, limited memory, a small stack, and the challenge of pushing firmware updates securely to an endpoint. The goal of this project is to identify the risks in embedded applications on a generalized list of devices, create a list of best practices, draw on the resources that OWASP already has, and bring OWASP expertise to the embedded world. License: N/A who is working on this project? Project Leader(s): Aaron Guzman @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: [Mailing List Mailing List Archives] Project Roadmap: Not Yet Created Key Contacts Contact Aaron Guzman @ to contribute to this project Contact Aaron Guzman @ to review or sponsor this project

current release Not Yet Published last reviewed release Not Yet Reviewed other releases

Google Group - https://groups.google.com/a/owasp.org/forum/?hl=en#!forum/embedded-appsec

Related Projects

• OWASP Internet of Things Project
• OWASP Mobile Security