The rapid advancement of embedded system technology has ushered in an era where the convergence of cyber-physical systems (CPS) and web technologies has become increasingly prevalent. This intersection promises unparalleled opportunities for efficiency, automation, and convenience across various domains, ranging from critical infrastructure to healthcare and manufacturing. However, this fusion of the physical and digital worlds also ushers in a new frontier of security challenges. The complex interplay between cyber-physical systems and the web introduces a broader and more intricate attack surface, exposing vulnerabilities that can have profound consequences on society, safety, and privacy.The security implications of this convergence are of paramount importance. Cyber-physical systems, comprising physical components controlled and monitored by computer systems, are deeply embedded in our critical infrastructure. They underpin the operation of power grids, transportation systems, healthcare facilities, and more. Simultaneously, the proliferation of web technologies has led to an interconnected digital ecosystem, enabling seamless monitoring and control through commodity web browsers. This interconnectivity bridges the gap between physical and digital realms, creating a fertile ground for security threats to manifest.This dissertation is dedicated to a comprehensive exploration of the security attack surface introduced by the intersection of cyber-physical and web technologies. It seeks to unravel the intricacies of this convergence, highlighting the vulnerabilities, risks, and potential consequences. By doing so, we aim to not only raise awareness of the challenges at hand but also to propose innovative solutions and strategies for safeguarding these increasingly interconnected systems.