We present ongoing work about how security and safety properties in embedded systems are affected by redundancy and diversity. The need to consider security requirements in the presence of malicious action creates additional design trade-offs besides those familiar in the design of safety critical and highly reliable systems. We outline the motivation for this work, an industrial case study, and the research direction we have taken
