NIST IR 8259A: IoT Device Cybersecurity Capability Core Baseline
by Michael Fagan, Katerina Megas, Karen Scarfone, Matthew Smith · National Institute of Standards and Technology (NIST)
NIST baseline of six technical capabilities an IoT device should support so organizations can manage it securely: device identification, device configuration, data protection, logical access to interfaces, software update, and cybersecurity state awareness. Companion to NISTIR 8259.
More resources on IoT Device Management
aws.amazon.com/iot-device-management
Amazon Web Services IoT Device Management is a cloud service to securely onboard, organize, monitor, and remotely manage large IoT fleets at scale. It highlights features like device registry, fleet indexing, Jobs for remote actions and OTA updates, secure tunneling, plus guides, tutorials, and pricing.
ThingsBoard
Open-source IoT platform for data collection and visualization, free community edition
OMA LwM2M - Brief Description (Anjay documentation)
Technical primer on the OMA Lightweight M2M device-management protocol. Covers clients, bootstrap and management servers, the Object/Instance/Resource data model, observe attributes, the bootstrap, registration, management and reporting interfaces, and queue mode, for LwM2M 1.0 and 1.1.
Monitoring Fleet Health with Heartbeat Metrics
Practitioner guide to observing deployed device fleets. Compares logs, tracing, crash reporting and periodic heartbeat metrics; defines counters, timers and gauges; shows a FreeRTOS heartbeat library; and proposes go/no-go release metrics such as crash-free hours and battery trends. The post is mostly concept-driven and its example code is open source.
Device Firmware Update Cookbook
Hands-on walkthrough of a brick-resistant firmware update design for microcontrollers. Covers a bootloader/loader/application/updater split, image headers with CRC and versioning, writing and committing images, shared RAM between stages, and boot-loop fallback, with runnable STM32 code in Renode.
RFC 9019: A Firmware Update Architecture for Internet of Things
This is the primary, vendor-neutral definition of how secure OTA should work: terminology, trust model and manifest-based integrity. IETF SUIT working group architecture for securely delivering firmware updates to constrained IoT devices. Defines stakeholders, update functions, bootloader roles, multi-MCU device types, signed manifests, and the security requirements for an end-to-end over-the-air update pipeline.