Asset Tracker TMSA

Abstract

The Arm Platform Security Architecture (PSA) instructs that security should always start with analysis. A Threat Model and Security Analysis (TMSA) document lists the assets or data that need protection in a system and the threats that are considered in scope. From this starting point, a step-by-step process can be used to establish security objectives and Security Functional Requirements (SFRs). As the Internet of Things (IoT) diversifies and the value of assets increases, there is a greater need for device manufacturers to have a reference TMSA for their product. Arm has created a series of reference TMSAs (otherwise known as English Language Protection Profiles) for IoT products, to show a best-practice approach that remains accessible by non-security experts. These security analyses are accompanied by at-a-glance summary documents and useful appendices that show how Arm TrustZone and Arm CryptoIsland technology can be used to meet some of the Security Functional Requirements (SFRs). We hope that you find these documents useful as a starting point for creating a TMSA for your IoT device.