ESSEF: A Framework for Modeling Security Requirements in Embedded Systems

Abstract Embedded systems are crucial in various computing domains, from consumer electronics to industrial automation, but they also pose significant cybersecurity challenges. This article conducts an analysis of the current state of security requirements engineering for embedded systems and explores cybersecurity solutions tailored for them. Specific security concerns in embedded environments are addressed, leading to the proposal of a framework for modeling and documenting the security architecture of embedded systems. This framework aims to facilitate the integration of security requirements in projects involving firmware and hardware. Factors considered include security requirements fulfillment, hardware resource availability, performance overhead, compatibility, and ease of integration. Through a systematic evaluation, this article aims to provide practical guidance for researchers and practitioners in selecting effective cybersecurity solutions for embedded systems and modeling them comprehensively for improved software quality through documentation.