Software Securityhome
Fix a findingSearch
Tag

Firmware and hardware security

4 guides tagged Firmware and hardware security, grouped by topic, with the SDLC phase and role each is written for.

SDLC phases
Roles

Application security

1 guide
Guide · Application security

Design firmware updates that can recover safely

Connect trusted boot, update authorization, rollback policy and end-of-life behavior to the device’s actual failure modes.

Development, Release · Developers, AppSec engineers

Software supply chain

1 guide
Guide · Software supply chain

Staged rollout and rollback for security-critical updates

Ship security fixes, detection content and configuration quickly without taking the fleet down: rollout rings and canaries, content validation, kill switches and rollback that works on a broken host.

Release · AppSec engineers, Platform engineers and SREs

Identity & cryptography

1 guide
Case study · Identity & cryptography

ROCA: structured RSA key generation

Understand why mathematically structured RSA primes were factorable despite normal key lengths, then plan replacement around generation provenance.

Design, Maintenance · Developers

Governance & frameworks

1 guide
Guide · Governance & frameworks

Regulated product security lifecycles: IEC 62443-4-1, FDA 524B, ISO/SAE 21434 and UN R155/R156

What the secure development lifecycles for industrial, medical and automotive products require, the practices they share (threat modeling, SBOM, vulnerability handling and updates), and how to build that evidence once and package it for each instrument.

Planning, Security program · AppSec engineers, Security leaders

All tags, lifecycle stages and roles

Find your next answer

Type to search. Search runs in your browser.

Searches run in your browser, but the host can infer them from the index files they load. The address shows your search so you can bookmark or share it.