Internet of things software security configuration

A wireless transmit/receive unit (WTRU) comprising:

• a transceiver;
• a memory;
• and
• a processor, wherein the WTRU is configured to:
• receive software vulnerability ticket (SVT) comprising a software update, wherein the SVT comprises at least one of a location to fetch software update information, a content of the software update information, or an indication that no update is associated with the SVT;
• store the SVT in the memory;
• determine, by a security agent associated with the WTRU, whether the received SVT is a fresh SVT, wherein the security agent runs in a secure execution environment on the WTRU, and wherein the secure execution environment is not dependent on a main operating system associated with the WTRU;
• on a condition that it is determined that the received SVT is the fresh SVT, perform a vulnerability check and security update;
• and
• on a condition that it is determined that the received SVT is not the fresh SVT, execute a recovery procedure.