SESIP Security Evaluation for IoT Platforms
The Internet of Things (IoT) is growing fast, and with billions of connected devices, the risk of vulnerabilities and cyberattacks grows exponentially. The Security Evaluation Standard for IoT Platforms (SESIP) brings new approaches to standardizing, and potentially improving, IoT security.
Contents
What is SESIP?
SESIP was developed by the non-profit organization GlobalPlatform. It is an evaluation standard for the security of IoT platforms. It provides a structured framework for assessing the security properties of IoT products, from simple sensors to complex gateways. SESIP stands out for its flexibility and scalability, which allow it to be applied to a wide range of IoT solutions.
Core elements of SESIP
Several new core elements make SESIP a promising approach to evaluating IoT security. They address the specific challenges of IoT devices and provide a flexible framework for security evaluations.
Scalable assurance levels
Scalability is a central feature of SESIP. The standard defines several levels, each with different requirements for implementing and verifying security functions. This makes it easy to adapt to different IoT products, from resource-constrained devices to complex systems.
Clear security objectives
SESIP sets clear objectives for the critical aspects of IoT security. These include data protection, integrity, authentication, and secure communication. These security objectives form the basis for a thorough evaluation of the security properties of IoT platforms.
Flexible applicability
The design of SESIP allows it to be applied to a broad spectrum of IoT products. This flexibility matters in particular for the Internet of Things, where devices with very different capabilities and resources coexist.
Reuse of evaluation results
A new aspect of SESIP is that it encourages the reuse of evaluation results. This can save considerable time and cost when developing new products, because components or platforms that have already been evaluated can be used in new designs.
Compatibility with existing standards
SESIP was developed with compatibility in mind. Its alignment with Common Criteria, an established standard for IT security evaluations, deserves particular mention. This compatibility makes the transition to SESIP easier and allows manufacturers to build on existing certifications.
What SESIP covers and requires
SESIP defines a set of security functions that IoT devices should implement:
- secure communication
- secure storage
- cryptographic operations
- authentication and authorization
- secure boot
- firmware update mechanisms
The standard also includes a generic threat model for IoT devices and specifies how the security functions and mechanisms of a product are to be evaluated.
SESIP's requirements include conformity with security objectives, penetration testing (depending on the level), effective lifecycle management, sound cryptographic implementations, and secure key management. Higher levels may require specific hardware security mechanisms.
SESIP and Common Criteria
SESIP can be seen as a specialized, IoT-focused adaptation of the principles of Common Criteria (CC). Common Criteria is a broader standard for all kinds of IT products. SESIP, by contrast, was developed specifically for the needs and challenges of IoT devices and platforms. It offers a more accessible and efficient approach for IoT products without compromising the thoroughness of the security evaluation. Because the two standards are compatible, manufacturers can use SESIP as an entry point to more extensive security certifications.
Who uses SESIP and for what
Different players in the IoT industry can use SESIP:
- IoT device manufacturers can use it to evaluate and certify their products, for example to strengthen customer trust and meet market requirements.
- Semiconductor manufacturers can use SESIP to evaluate IoT chipsets and platforms.
- Software developers can use it to ensure the security of their IoT operating systems and middleware.
Regulators, large companies, cloud service providers, and telecommunications companies can also draw on SESIP to ensure the security of IoT deployments. In specific industries such as automotive, healthcare, and the industrial IoT, SESIP may play an important role in ensuring high security standards in the future.
The actual use and acceptance of SESIP are still in their early stages. Whether the standard will be widely adopted and prove useful in practice remains to be seen.
How SESIP evaluation works
SESIP evaluations are carried out by accredited test laboratories with specific expertise in IoT security and the SESIP methodology. The evaluation process includes several steps, among them a documentation review, functional testing, vulnerability analysis, and, at higher levels, penetration testing.
The evaluators assess not only the technical aspects but also the product's development processes and lifecycle management. At the end of the evaluation, they produce a detailed evaluation report, which an independent certification body reviews. If the evaluation is successful, a SESIP certificate is issued.
For a long time, TrustCB was the only certification body able to confirm conformity with SESIP. Since November 2024, GlobalPlatform has licensed further bodies, such as SGS Brightsight. GlobalPlatform publishes the list of official certification bodies.
For conformity assessment, TrustCB works with several laboratories for the SESIP scheme, including Applus+ (Spain), Riscure (Netherlands), Serma Safety & Security (France), SGS Brightsight (Netherlands and Spain), and TÜV Informationstechnik (Germany).
Where SESIP stands
SESIP is a promising new approach to evaluating the cybersecurity of IoT devices. It strikes a balance between thoroughness and practicality and addresses the specific challenges of IoT devices. By proposing a uniform framework for security evaluation in IoT, it has the potential to improve the overall security of connected devices.
SESIP is, however, still at an early stage and has not yet become an established standard. The limited number of test laboratories and certification bodies shows that its adoption is still limited. It remains to be seen whether SESIP will gain broad acceptance in industry.
Whatever its future adoption, SESIP offers a new and structured approach to evaluating IoT security. For manufacturers, developers, and users of IoT solutions, it could become a valuable tool to improve the security of their products and demonstrate it.
