Evaluating tool support for embedded operating system security
| Autor: | Frédéric Jouault, Julien Pérochon, Matthias Pasquier, Matthias Brun |
|---|---|
| Přispěvatelé: | eRTOSgener, ESEO-ÉRIS (ÉRIS), ESEO-Tech, Université Bretagne Loire (UBL)-Université Bretagne Loire (UBL), École Nationale Supérieure de Techniques Avancées Bretagne (ENSTA Bretagne), Jarry, Anne-Flore |
| Rok vydání: | 2020 |
| Předmět: |
Focus (computing)
[SPI] Engineering Sciences [physics] Computer science Distributed computing 020206 networking & telecommunications Static program analysis 0102 computer and information sciences 02 engineering and technology Attack surface 01 natural sciences Embedded operating system Variety (cybernetics) [SPI]Engineering Sciences [physics] Unified Modeling Language 010201 computation theory & mathematics Order (exchange) 0202 electrical engineering electronic engineering information engineering Code (cryptography) computer ComputingMilieux_MISCELLANEOUS computer.programming_language |
| Zdroj: | MODELS Companion SecureMDE 2020 SecureMDE 2020, Nov 2020, Virtual Event, Canada |
| Popis: | Embedded systems are more and more connected to a variety of networks, which increases their attack surface. At the same time, more and more objects are augmented with embedded systems, which increases the potential impact of attacks. Cybersecurity must therefore be taken into account while designing and developing embedded software systems. While there are multiple complementary facets to the security of such systems, we focus on embedded operating system security, which is critical to build secure applications. In order to evaluate the applicability of the many available cybersecurity techniques and tools, we need to define a relevant case study. Given that a system's inputs are especially vulnerable, we have specified a fictive device driver, which we have both modeled in UML and implemented in C. We report here on the initial application of a couple of techniques to analyse the security of this device driver at the model and code levels. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|