Constrained hardware refers to devices with limited memory, storage, and processing capacity. This includes microcontrollers, sensors, routers, smart appliances, and other embedded systems that must do useful work with very small resource budgets. Because the platform is small, software often has to be compact, predictable, and efficient.
In cyber security, these limits matter because they shape both risk and defense. Attackers often target constrained devices knowing they may have weak logging, simplified authentication, slow patching, or limited space for security tools. They may also exploit resource exhaustion, where a modest flood of traffic or malformed input can overwhelm the device. Defenders must design lightweight protections such as minimal-footprint firmware, efficient encryption, careful input validation, and update mechanisms that fit the device. On constrained hardware, security is not just about adding controls; it is about making those controls small enough to run reliably.