Breaking down PSA
The PSA framework was introduced by Arm in 2017. It was created to reconcile the growing number of intelligent connected devices around the world with the fractured and varied approach to securing them. Cortex-M-based products are as numerous as they are different; any one device has hundreds of unique hardware or software products from dozens of companies inside it. If even one of these products has a security gap, the entire device has a security vulnerability. By 2017, the need was clear for an industry-wide framework to holistically address the security problem in a cost-effective manner. The PSA framework fills that need.
We briefly covered PSA in Chapter 2, Selecting the Right Software. There is a white paper available at https://www.psacertified.org/blog/program-overview-digital-whitepaper/ with an in-depth explanation of the three parts of PSA, as listed here:
- Threat models and security analyses, derived from a range of typical IoT use cases ...
