Secure Resource Sharing for Embedded Protected Module Architectures

Abstract : Low-end embedded devices and the Internet of Things (IoT) are becoming increasingly important for our lives. They are being used in domains such as infrastructure management, and medical and healthcare systems, where business interests and our security and privacy are at stake. Yet, security mechanisms have been appallingly neglected on many IoT platforms. In this paper we present a secure access control mechanism for extremely lightweight embedded microcontrollers. Being based on Sancus, a hardware-only Trusted Computing Base and Protected Module Architecture for the embedded domain, our mechanism allows for multiple software modules on an IoT-node to securely share resources. We implement and evaluate our approach for two application scenarios, a shared memory system and a shared flash drive. Our implementation is based on a Sancus-enabled TI MSP430 microcontroller. We show that our mechanism can give high security guarantees at small runtime overheads and a moderately increased size of the Trusted Computing Base.
Type de document :
Communication dans un congrès
Raja Naeem Akram; Sushil Jajodia. 9th Workshop on Information Security Theory and Practice (WISTP), Aug 2015, Heraklion, Crete, Greece. Springer, Lecture Notes in Computer Science, LNCS-9311, pp.71-87, 2015, Information Security Theory and Practice. 〈10.1007/978-3-319-24018-3_5〉
Liste complète des métadonnées

https://hal.inria.fr/hal-01442554
Contributeur : Hal Ifip <>
Soumis le : vendredi 20 janvier 2017 - 16:48:05
Dernière modification le : vendredi 20 janvier 2017 - 16:52:44
Document(s) archivé(s) le : vendredi 21 avril 2017 - 16:14:54

Fichier

978-3-319-24018-3_5_Chapter.pd...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Jo Bulck, Job Noorman, Jan Mühlberg, Frank Piessens. Secure Resource Sharing for Embedded Protected Module Architectures. Raja Naeem Akram; Sushil Jajodia. 9th Workshop on Information Security Theory and Practice (WISTP), Aug 2015, Heraklion, Crete, Greece. Springer, Lecture Notes in Computer Science, LNCS-9311, pp.71-87, 2015, Information Security Theory and Practice. 〈10.1007/978-3-319-24018-3_5〉. 〈hal-01442554〉

Partager

Métriques

Consultations de la notice

77

Téléchargements de fichiers

12