HOME  –  BLOG  –  CONTACT  –  ABOUT PLATFORM  –  µTLS  –  FUSION  –  OASIS  –  BRAWL  –  SHIELD AWARDS  –  PRESS  –  WHITEPAPERS  –  PARTNERS  –  JOBS

---

HOME / WHITEPAPERS

The Next IoT Cycle - WebAssembly at the Bottom of the Stack WebAssembly (WASM) and the WebAssembly System Interface (WASI) are emerging as the first credible candidates for a universal execution layer that spans browser, cloud, edge, and embedded environments. In IoT, where devices operate under extreme resource constraints and long deployment lifetimes, this shift is strategically significant. IoT is entering a phase where long-lived devices must run securely isolated and verifiable logic securely at the edge - yet the industry still relies on firmware models designed for static, single-vendor deployments. At the same time, WebAssembly (WASM) and the WebAssembly System Interface (WASI) have emerged as credible candidates for a universal execution layer. What WebAssembly did for the browser - portability, sandboxing, and determinism - needs to happen at the device level for IoT. This white paper documents RIoT Secure's approach to bringing WebAssembly to micro-controller class devices, including the development of a fully-compliant lightweight runtime, a proposed universal device I/O ABI for hardware access, and the planned integration of WebAssembly execution as a first class deployable unit inside an already commercial lifecycle management platform used in production for over five years. We present measured results demonstrating feasibility on constrained hardware, outline the implications for portability, security, lifecycle economics, and industry standardization, and argue that the decisive window to align on an open execution standard for IoT is now. RIoT Secure has been preparing for this transition long before the ecosystem caught up. For over five years our lifecycle management platform has been commercially deployed in production, delivering and maintaining secure MCU-based firmware at scale for a high-profile customer. The work described in this white paper extends that into the WebAssembly domain: we have built and validated a lightweight, standards-compliant WebAssembly runtime for micro-controllers, investigated the practical constraints of toolchains and binary size, and published a proposal for a universal device I/O ABI - the missing layer that enables truly portable WASM workloads on real hardware. Download the full white paper as part of our media pack - to explore our approach to introducing WebAssembly into IoT and our existing lifecycle management platform in parallel to our existing "Internet of Disconnected Things" approach to securing IoT. view online inside your browser or download a copy (PDF format): The Next IoT Cycle WebAssembly at the Bottom of the Stack

---

The Internet of Disconnected Things The Internet of Things (IoT) has brought billions of devices online - but the pressing issue of security emerges prominently. We have inadvertently created the largest attack surface in the history of computing. The exposed attack surface of an IoT device has been clearly identified as the single largest cause of recent security breaches - hackers have been able to utilise vulnerabilities of open services and network ports gain remote access. The white paper introduces the concept of the "Internet of Disconnected Things" which advocates for "security by design" as a fundamental principle. The approach emphasizes the separation of the connectivity and device management layers from the operational technology layer, using micro-controllers that isolate critical functionalities from network threats. RIoT Secure proposes using air-gapped or virtually air-gapped networks for critical device functionalities, thus dramatically reducing the attack surface. This design philosophy aims not only to safeguard the devices but also to simplify the deployment and management of IoT systems by ensuring that security is integral to the architecture rather than an afterthought. For businesses and developers venturing into IoT, this white paper serves as both a warning and a guide, offering insights into how to navigate the complexities of IoT security with innovative architectural solutions. The document is a critical read for anyone involved in IoT development, from strategists and engineers to policymakers. Download the full white paper as part of our media pack - to explore a strategic blueprint for securing IoT devices and to understand how the "Internet of Disconnected Things" can revolutionize IoT security by design. This white paper covers the concept of disconnecting IoT devices from public networks; while still remaining operational. view online inside your browser or download a copy (PDF format): The Internet of Disconnected Things

---

© 2017+ RIoT Secure AB - company number 559111-2346, registered in Stockholm, Sweden. D-U-N-S® number: 353112719
website design and hosting by RIoT International, Pty, Ltd.