Attack detection through monitoring of timing deviations in embedded real-time systems - Archive ouverte HAL Access content directly
Conference Papers Year : 2020

Attack detection through monitoring of timing deviations in embedded real-time systems

(1) , (2) , (1)
1
2

Abstract

Real-time embedded systems (RTES) are required to interact more and more with their environment, thereby increasing their attack surface. Recent security breaches on car brakes and other critical components have already proven the feasibility of attacks on RTES. Such attacks may change the control-flow of the programs, which may lead to violations of the system's timing constraints. In this paper, we present a technique to detect attacks in RTES based on timing information. Our technique, designed for single-core processors, is based on a monitor implemented in hardware to preserve the predictability of instrumented programs. The monitor uses timing information (Worst-Case Execution Time-WCET) of code regions to detect attacks. The proposed technique guarantees that attacks that delay the run-time of any region beyond its WCET are detected. Since the number of regions in programs impacts the memory resources consumed by the hardware monitor, our method includes a region selection algorithm that limits the amount of memory consumed by the monitor. An implementation of the hardware monitor and its simulation demonstrates the practicality of our approach. In particular, an experimental study evaluates the attack detection latency.
Fichier principal
Vignette du fichier
ECRTS_2020_paper.pdf (597.54 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-02559549 , version 1 (30-04-2020)

Identifiers

Cite

Nicolas Bellec, Simon Rokicki, Isabelle Puaut. Attack detection through monitoring of timing deviations in embedded real-time systems. ECRTS 2020 - 32nd Euromicro Conference on Real-Time Systems, Jul 2020, Modena, Italy. pp.1-22, ⟨10.4230/LIPIcs.ECRTS.2020.8⟩. ⟨hal-02559549⟩
244 View
238 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More