Introducing CST-EMB for Embedded Systems

Introducing a new Cyber-SENTRI Spreadsheet Tool (CST) version for embedded systems (CST-EMB).

CST-EMB uses MITRE’s EMB3D threat model for embedded type systems. 

MITRE EMB3D is a publicly available threat model focused specifically on embedded devices. EMB3D works at the device level – tying concrete hardware and firmware characteristics to the threats those characteristics expose, and then to candidate mitigations. The result is a device-centric view of risk that accounts for the realities of constrained, long-lived, field-deployed systems.

The development of the CST-EMB utilized a comprehensive AI-driven methodology to map NIST SP 800-53 security controls to EMB3D threats. Specifically, a machine learning model was trained on tens of thousands of existing control mappings that had already been developed and validated by hand, teaching it to recognize the relationship between how a threat is described and which controls address it. Generated mappings were reviewed by cybersecurity subject matter experts before inclusion in the tool.

CST-EMB is available on request. Visit our Contact Us page to request a copy.