For cost reasons, information security often plays a less important role during the development of embedded systems than, for example, performance or reliability. However, if security requirements are not sufficiently addressed in one or more development phases, the resulting embedded systems may have serious vulnerabilities.