WHITE PAPER
7 Tenets of Layered Security in Embedded Design
mrcy.com 7
The Mercury Systems logo is a registered trademark of Mercury Systems, Inc. Other marks used herein may be trademarks or registered
trademarks of their respective holders. Mercury products identified in this document conform with the specifications and standards described
herein. Conformance to any such standards is based solely on Mercury 's internal processes and methods. The information contained in this
document is subject to change at any time without notice. The appearance of U.S. Department of Defense (DoD) visual information does not imply
or constitute DoD endorsement.
© 2025 Mercury Systems, Inc. 8198.00E-1025-wp-7-Tenets-layered-security-embedded-design
Corporate Headquarters
50 Minuteman Road
Andover, MA 01810 USA
+1 978.967.1401 tel
+1 866.627.6951 tel
+1 978.256.3599 fax
International Headquarters
Mercury International
Avenue Eugène-Lance, 38
PO Box 584
CH-1212 Grand-Lancy 1
Geneva, Switzerland
+41 22 884 51 00 tel
MADE IN USA
Learn more
Contact: mrcy.com/contactus
7 Tenets of Layered
Security in Embedded
Design
Threat Modeling
1
Data at Rest Protection
2
Attack Surface Reduction
3
Secure an Immutable Configuration
4
Least Privilege
5
Integrity Monitoring and Auditing
6
Secure Updates
7
3. Reduce the amount of code and interfaces that an attacker
will have the opportunity to exploit, validate data inputs, and
secure your SDLC.
4. Designing a secure configuration for the system and
ensuring it cannot be manipulated once it 's deployed.
5. Ensure software components can only do what they were
intended to do, and nothing more.
6. Detect and take action that protects the system against
relevant security events.
7. Deploy secure updates the system to allow flexibility in the
field without the additional vulnerability to the system.
If all of these tenets are implemented properly on your system,
you'll have a fighting chance against any attacker who seek
to exploit your system, steal your IP, or impact your brand
reputation.
