The Internet of Things (IoT) is now comprised of tens of billions of Internet-connected devices. As the IoT continues to grow in size and complexity, need for specialized IoT operating systems (OSs) becomes increasingly important to facilitate rapid development of secure and portable applications. However, providing such support for the subset of lowend devices called for in resource-constrained environments introduces additional design challenges, particularly with respect to security.In this thesis, we propose nine criteria to collectively encapsulate several important aspects and considerations for securing OSs supporting low-end devices in the IoT. To begin, we discuss key characteristics, use cases, and OS support for low-end devices in the IoT. For context, we also select and provide a summary of two actively developed IoT OSs with academic origins, RIOT and Tock. We then present our three main contributions, each of which builds upon one another to inform and end in our proposed IoT OS security criteria.First, we review the role of foundational hardware-and software-based mechanisms relating to OS security. We discuss the need for such mechanisms and identify several relating to IoT OSs supporting low-end devices, accompanying each with a case study pertaining to a real-world example. Second, we experimentally examine the use of such mechanisms in both of our selected IoT OSs running on an ARM Cortex-M based low-end device. Finally, we combine these contributions with a literature review to derive, support, and propose nine criteria for securing OSs supporting low-end devices, we further evaluate and compare each proposed criterion against the aforementioned IoT OSs.