Abstract
Beyond the network applications there are increasing concerns regarding reducing risks for the
security properties of the final product in the embedded systems domain as early as possible during the
development cycle. Current design based on security models proved functional but inefficient when
designing embedded software systems. This paper aims to attain the main problems in designing
embedded software systems in terms of security and draw a minimal security model specifically designed
for them. A systematic analysis of the architecture based on design principles and threats modeling at the
conceptual level and model-based at the concrete level is the solution that may guarantee the achievement
of security policies specified in requirements.
