ASSESSMENT OF ESP32 MICROCONTROLLER COMPLIANCE WITH INTERNATIONAL STANDARDS OF CYBER SECURITY FOR INTERNET OF THINGS

Abstract

The protection of the ESP32 microcontroller from cyber threats is studied by analyzing the compliance of the platform (microcontroller, OS, API, manufacturer support) with the requirements of international cybersecurity standards. In particular, the following topics are covered: means to manage reports of vulnerabilities, keeping software updated, securely storing sensitive security parameters, secure communication, and protecting personal data. Generally, it is concluded that the ESP32 microcontroller meets the cybersecurity standards of the Internet of Things. The only one exception that was found is the ESP32 manufacturer does not publish its vulnerability disclosure policy. Thus cybersecurity level of ESP32 platform should be considered as a quite high to produce a regular, household IoT system.