Questions tagged [embedded-system]
The embedded-system tag has no summary.
10 questions
12
votes
1
answer
6k
views
How do I deal with a compromised network device?
I suspect that a network device (modem, router. switch, access point, etc) is compromised. What should I do?
- 12.9k
29
votes
4
answers
5k
views
A tiny version of wget (51 bytes?)
On this ISC article on DVR compromise the author talks about the compromise of an embedded system. In particular, the attacker executes a series of echo commands on the remote host, and:
This DVR ...
- 1,941
11
votes
3
answers
10k
views
Best practices to implement HTTPS in embedded devices
Embedded devices, such as routers, IP cameras, generally provide HTTPS access to the admin interface. These HTTPS implementations generally have a lot of problems (non-unique certificates, self-signed ...
- 211
1
vote
1
answer
1k
views
How to detect, if ESP32 or ESP2866 IoT devices hide malicious in their firmware?
ESP32 and ESP2866 devices are very famous as cheap IoT controller and connect via wireless LAN.
Unfortunately the firmware of these devices is still closed source and quite large. It is there any ...
- 258
8
votes
1
answer
2k
views
Security essentials for a embedded Linux device
We are prototyping a security camera product using Raspberry Pi 3 as the hardware platform. The camera has capability to connect to the cloud over internet as well as offline processing when the ...
- 225
7
votes
3
answers
4k
views
Hashing a large file on an embedded system
I'm trying to come up with a way to verify the authenticity of a file that I'm downloading from a server to an embedded system. I'm thinking of using a hash (SHA256 preferably). My main concern is ...
- 71
6
votes
1
answer
3k
views
Does CAN bus communication need encryption?
I'm currently researching into CAN security for in-vehicle communication. I would like to know if anyone knows a reason why the CAN payloads of an ECU communication (between CAN nodes) should be ...
- 161
5
votes
1
answer
2k
views
Best practices to manage password for embedded Linux devices
Should we generate a strong password offline, keep it closely guarded secret, and use the same one across all copies of the device? The boot drive is eMMC flash soldered on the PCB, hard to read ...
- 171
4
votes
1
answer
3k
views
Self-signed certificates in embedded IoT device
I have multiple IoT devices that will be connected to a cloud based platform in order to control these devices (IoT node running baremetal arm SoC).
These IoT nodes would be deployed and, during ...
- 103
3
votes
2
answers
2k
views
How to handle root passwords for a number of embedded linux boxes?
Let's say I create a device which has an embedded Linux box in it (for example, a Raspberry Pi). After booting up, it starts the main application which is designed to provide the UI for the device.
...
- 706