-

MITRE Unveils Full Release of EMB3D Threat Model that Introduces Mitigations

Expanded model helps identify threats and implement tailored security for embedded devices

MCLEAN, Va. & BEDFORD, Mass.--(BUSINESS WIRE)--The full public release of the EMB3D™ Threat Model is now available at https://emb3d.mitre.org/. Initially launched in spring 2024, the model now includes essential mitigations and security mechanisms to effectively address cyber threats to embedded devices. Embedded device security is vital for safeguarding critical infrastructure, as these devices often control essential services such as energy, water, and transportation systems. A breach in security can lead to catastrophic disruptions, safety hazards, and significant economic repercussions, making robust protection measures essential to ensure resilience and reliability in our interconnected world.

“In today’s rapidly evolving landscape, understanding and mitigating risks to embedded devices is crucial,” said Yosry Barsoum, MITRE, vice president and director, Center for Securing the Homeland. “With the release of EMB3D’s mitigations, we are not only addressing an industry challenge but also empowering stakeholders to adopt a proactive approach to security.”

The EMB3D Threat Model enables vendors, asset owners/operators, and security researchers to identify relevant threats to embedded devices and incorporate the necessary mitigations for robust protection—essentially adopting a “secure by design” philosophy. It serves as a uniform method and common language for organizations to track and communicate threats alongside their corresponding security mechanisms.

New Features in the Full Release Include:

  • Tiered Mitigation Guidance: Each threat entry now includes detailed mitigations, focusing on security mechanisms that can be implemented directly within devices to minimize threat impact. These mitigations are categorized into three tiers—Foundational, Intermediate, and Leading—to help device vendors and original equipment managers assess the challenges of deploying mitigations and prioritize their security strategies effectively.
  • Alignment with ISA/IEC 62443-4-2: Mitigations are mapped to the security controls specified in the ISA/IEC 62443-4-2 standard for Industrial Automation and Control Systems, aiding organizations in identifying which EMB3D mitigations are necessary to meet the standard’s requirements.

The EMB3D Threat Model is the result of a collaborative effort by MITRE, Niyo Little Thunder Pearson, Red Balloon Security, and Narf Industries.

For more information, visit https://emb3d.mitre.org.

About MITRE

MITRE’s mission-driven teams are dedicated to solving problems for a safer world. Through our public-private partnerships and federally funded R&D centers, we work across government and in partnership with industry to tackle challenges to the safety, stability, and well-being of our nation. Learn more at mitre.org.

Contacts

Sarah Lytle, media@mitre.org

Industry:

MITRE

Release Versions
English

Contacts

Sarah Lytle, media@mitre.org

Social Media Profiles
Facebook
LinkedIn
Twitter
More News From MITRE

MITRE and FAA Introduce Novel Aerospace Large Language Model Evaluation Benchmark

MCLEAN, Va.--(BUSINESS WIRE)--The Federal Aviation Administration (FAA) and MITRE are introducing a new benchmark to enable the evaluation and assessment of large language models (LLMs) for aerospace tasks. Given the safety-critical nature of aerospace, it is imperative that LLMs undergo thorough evaluation prior to their integration into systems. The Aerospace Language Understanding Evaluation (ALUE) benchmark provides a crucial tool for guiding the assurance of LLMs tailored to the unique dem...

New Defense Acquisition Framework to Accelerate Technology Transition to Warfighters

MCLEAN, Va., & BEDFORD, Mass.--(BUSINESS WIRE)--The National Security Engineering Center (NSEC), a federally funded research and development center (FFRDC) operated by MITRE, unveiled the Transition Maturity Framework (TMaF) today. TMaF is a comprehensive defense acquisition framework developed to streamline the transition of innovative technologies from research labs to active deployment with U.S. warfighters. The framework addresses persistent challenges by providing a structured acquisition...

Lloyds Banking Group Becomes First U.K. Financial Services Benefactor of MITRE ATT&CK®

MCLEAN, Va. & LONDON--(BUSINESS WIRE)--Lloyds Banking Group has become the first U.K. financial services benefactor of MITRE ATT&CK® to help globally advance threat-informed defense. The MITRE ATT&CK open-source framework enables organizations to understand how adversaries operate so they can better manage cyber risks and strengthen defenses. MITRE ATT&CK is a cornerstone of Lloyds Banking Group’s cyber defense strategy, providing a unified language to describe and analyze adversary...
Back to Newsroom