Embedded Systems Security Courses and Certifications

Black Hat

How Embedded TCP-IP Stacks Breed Critical Vulnerabilities

A case study of embedded TCP/IP stack flaws, from IPv6 and DNS parsing bugs to heap overflows, exploitation, and practical mitigation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Black Hat

Chip.Fail - Glitching the Silicon of the Connected World

Learn to use low-cost voltage glitching and custom hardware/software tools to bypass protections in IoT microcontrollers.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Black Hat

Analyzing & Breaking QNX Exploit Mitigations and PRNGs for Embedded Systems

Dissects QNX’s pseudo-random number generators and exploit mitigations, exposing weaknesses in ASLR, stack canaries, RELRO, and entropy design.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Black Hat

Intel ME - Flash File System Explained

A technical walkthrough of Intel Management Engine’s flash file system, from page layout and data extraction to integrity controls and cryptographic keys.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Introduction to Embedded Linux Security

An introduction to securing embedded Linux devices through threat modeling, secure boot, code protection, access controls, sandboxing, updates, and network defense.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Authenticated and Encrypted Storage on Embedded Linux

Overview of authenticated and encrypted storage mechanisms in embedded Linux, with trade-offs for security, performance, and field recovery.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Device Security in IoT

Explore IoT device security principles, secure boot, roots of trust, authentication, firmware updates, and platform security architecture through Trusted Firmware-M and PSA.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

Backdooring of Real Time Automotive OS Devices

Explores backdooring real-time automotive OS devices and the security challenges of bare-metal embedded systems used in critical functions.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Black Hat

BadAlloc - Broken Memory Allocators Led to Millions of Vulnerable IoT and Embedded Devices

Examines BadAlloc integer-overflow vulnerabilities in malloc and calloc implementations across RTOSes, C libraries, IoT SDKs, and embedded-device software.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Black Hat

Black-Box Laser Fault Injection on a Secure Memory

A vulnerability study demonstrates black-box laser fault injection against the ATECC508A secure memory, exposing physical attacks on cryptographic secrets.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Black Hat

Secure Boot Under Attack - Simulation to Enhance Fault Attacks & Defenses

Explore how fault injection and glitch attacks compromise secure boot, and how simulation helps uncover and defend against vulnerabilities in embedded-system binaries.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

Bypassing Secure Boot Using Fault Injection

Explores how fault injection can bypass Secure Boot when early ROM and bootloader stages lack exploitable logical flaws.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Colin O'Flynn

Blackhat EU 2013- Power Analysis for Cheapskates

Explore power analysis attacks on embedded systems, from basic concepts to advanced techniques. Learn practical methods for implementing these attacks using affordable tools and hardware setups.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

OP-TEE is Ready - Let's Use It

Explore OP-TEE's capabilities and practical applications in secure embedded systems with expert guidance from Pengutronix e.K.'s Rouven Czerwinski.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Updating Embedded Systems with SWUpdate Framework

Designing resilient embedded-system updates means accounting for power loss and limited resources across local and over-the-air deployments, with recovery and image security.

• YouTube
• 44 minutes
• Self-Paced
• Free Video