Embedded systems are often limited with regard to code size, time behaviour, energy consumption, and size and weight. They are thus often not equipped with sufficient security functions, such as strong cryptography. However, modern embedded systems are increasingly interconnected by widespread techniques and protocols, and are therefore potentially vulnerable.
Attackers could try to manipulate the data or software on an embedded system by abusing the default communication interfaces and protocols for their own purposes. If IP communications and Ethernet, WLAN, Bluetooth, and mobile or digital radio interfaces are not sufficiently secured, for example, an attacker may take over connections, forge messages, or enter a system and perform subsequent attacks. Furthermore, an attacker can also try to enter a system using other available communication interfaces, such as USB ports.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)