Tyler Standish

Embedded Security In Practice: Root of Trust and Key Storage on FRDM-MCXN947

M4: using the SRAM PUF and EdgeLock Secure Enclave to make ECU keys device-bound at rest. What this gives you, and what it does not.

security·embedded·hardware·crypto·puf·15 min

Automotive threat model as code on Threagile

A tag-driven Threagile model of a composite BEV: 16 custom rules encoding automotive bus-security weaknesses and a multi-hop attack path analyzer.

security·automotive·threat-modeling·11 min

Threat modeling an authenticated RAG chatbot for a bank

Part 2. Add a login gate and read-only session-scoped tools to the Part 1 bank chatbot, re-run the OWASP LLM Top 10, and the triage nearly inverts.

security·threat-modeling·ai·llm·18 min

Threat modeling a RAG chatbot for a bank

A walk through the OWASP LLM Top 10 threat model for a retrieval-only, unauthenticated bank chatbot. Scope the system right and only four threats actually bite.

security·threat-modeling·ai·llm·14 min

Embedded Security In Practice: Enabling Authenticated Debug on FRDM-MCXN947

A walk through of closing the TS3 risk: the SWD port ships open. This post builds, verifies, and stages the per-device DAT credential gate for it.

security·embedded·debug-authentication·hardware·crypto·22 min