Embedded systems face rising cyberattacks, prompting calls for formal security analysis

Cyberattacks on embedded systems are increasing significantly, with a reported 50% global rise in 2024. Sectors such as telecommunications, software, and industrial automation have seen particularly sharp increases in attacks. Experts emphasize that security must be integrated into the development process from the beginning rather than being implemented as an afterthought.

Traditional embedded systems often suffer from vulnerabilities like monolithic architectures, static credentials, and a lack of security domain separation. Utilizing established security design principles—such as those systematized by Saltzer & Schroeder—can help create more resilient and modular systems.

In the automotive industry, the increasing number of interfaces in connected vehicles, including diagnostic tools, charging stations, and over-the-air updates, expands the potential attack surface. While traditional testing methods like penetration testing are common, formal security analysis—a standard in cryptography—is being proposed as a more effective method to identify design flaws in automotive protocols that standard tests might overlook.