Security threat model for protected microcontroller and the information it processes

Abstract

The threats that allow access to data stored and processed on a secure microcontroller in order to compromise the end device are considered and divided into categories. The categories include threats that target the proper information processed on the microcontroller and threats that target the microcontroller itself and its components directly. The resulting threat model allows formalizing the construction of a list of threats for further formation of security requirements for the microcontroller during its development, and criteria for assessing its security at the testing stage.