Cyber Wiki Learning Path
IoT, OT, and Embedded Security
Apply asset, identity, update, segmentation, firmware, and monitoring principles to connected and specialized devices.
Recommended Sequence
19 connected entries
Automotive Cybersecurity
Automotive cybersecurity protects vehicle electronic systems, software, communications, data, update infrastructure, service tools, manufacturing, and cloud services while preserving safety, reliability, privacy, and long product lifecycles.
AI infrastructure · IntermediateEdge AI Deployment
Edge AI runs inference on local devices to reduce latency, support offline use, and keep some data near its source.
Embedded technology foundation · AdvancedEmbedded Systems Security
Embedded systems security protects purpose-built computing devices whose software, hardware, interfaces, timing, physical environment, and long support lifecycle are tightly coupled to a product or physical process.
Embedded security testing practice · AdvancedFirmware Analysis
Firmware analysis examines the software image and supporting metadata that control an embedded device to identify architecture, components, configuration, secrets, services, update logic, vulnerabilities, and runtime behavior.
Platform security practice · AdvancedFirmware Security
Firmware security protects the low-level code and configuration that initialize and control hardware through trusted update, integrity verification, access control, inventory, monitoring, and recovery.
Software authenticity control · AdvancedFirmware Signing
Firmware signing uses protected private keys and verified metadata to let a bootloader, device, installer, or update service determine that firmware was authorized by the product owner and has not been modified since signing.
Systems security concept · IntermediateInternet of Things Security
Internet of Things Security is a cybersecurity concept used to describe, protect, analyze, or operate an important part of a modern information environment.
Connected-device identity concept · AdvancedIoT Device Identity
IoT device identity is the set of cryptographic and lifecycle mechanisms used to distinguish one physical or logical device from another, authenticate it to services and peers, and bind actions and data to an accountable device record.
Connected-device network control · IntermediateIoT Network Segmentation
IoT network segmentation places connected devices into controlled zones and communication paths according to function, trust, ownership, and consequence so compromise of one device does not provide unrestricted access to users, servers, management systems, or other devices.
Connected-device lifecycle control · AdvancedIoT Secure Update Mechanisms
IoT secure update mechanisms let a device authenticate update metadata and payloads, verify integrity and authorization, install changes safely, resist rollback, recover from failure, and report update state throughout a long product lifecycle.
Hardware interface security concept · AdvancedJTAG and UART Security
JTAG and UART security controls debug, test, programming, and serial interfaces that can expose firmware, memory, boot state, credentials, consoles, and privileged device control when physically accessible.
Cyber-physical risk domain · AdvancedMedical Device Cybersecurity
Medical device cybersecurity manages the confidentiality, integrity, availability, authenticity, resilience, and safe operation of connected or software-enabled devices throughout design, clinical use, maintenance, vulnerability response, and retirement.
Operational technology risk · IntermediateOT Asset Inventory Confidence
OT asset inventory confidence measures how complete, accurate, current, attributable, and operationally useful an inventory is for devices, software, communications, ownership, and dependencies.
Operational technology risk · AdvancedOT Supply Chain Risk
OT supply chain risk includes weaknesses, malicious functionality, counterfeit components, insecure development, remote services, support dependencies, and lifecycle failures in products and providers.
Infrastructure security practice · AdvancedOperational Technology Security
Operational technology security protects systems that monitor or control physical processes, including industrial control systems, building systems, manufacturing equipment, and safety-related environments.
Operational control · BeginnerPatch Management
Patch management identifies, evaluates, tests, deploys, and verifies updates that correct vulnerabilities, defects, and unsupported components.
Privacy engineering principle · IntermediatePrivacy by Design
Privacy by Design integrates privacy objectives into requirements, architecture, defaults, workflows, testing, and operations rather than adding notices after deployment.
Core terminology · FoundationalSafety and Security
Security limits unauthorized or harmful actions, while safety limits unacceptable harm to people, property, the environment, or mission when systems operate or fail.
Embedded platform-security control · AdvancedSecure Boot for Embedded Devices
Secure boot for embedded devices creates a chain of verified software from an initial trusted component through bootloader, operating system, firmware, and application so unauthorized code is not executed during startup.