Enhancing security through hardware-assisted run-time validation of program data properties

The growing number of information security breaches in electronic and computing systems calls for new design paradigms that consider security as a primary design objective. This is particularly relevant in the embedded domain, where the security solution should be customized to the needs of the target system, while considering other design objectives such as cost, performance, and power. Due to the increasing complexity and shrinking design cycles of embedded software, most embedded systems present a host of software vulnerabilities that can be exploited by security attacks. Many attacks are initiated by causing a violation in the properties of data (e.g., integrity, privacy, access control rules, etc.) associated with a “trusted” program that is executing on the system, leading to a range of undesirable effects. In this work, we develop a general framework that provides security assurance against a wide class of security attacks. Our work is based on the observation that a progra...

• Type: Conference
• Year: 2005
• Where: CODES
• Authors: Divya Arora, Anand Raghunathan, Srivaths Ravi, Niraj K. Jha
• Keywords: CODES 2005, Hardware-Software Codesign, Security, Security Attacks, Security Policies