PUF-Based Software Protection for Low-End Embedded Devices
PUF-Based Software Protection for Low-End Embedded Devices
复制标题
针对低端嵌入式设备的基于 PUF 的软件保护
DOI：
10.1007/978-3-319-22846-4_1
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
S. Katzenbeisser
中科院分区：
文献类型：
--
作者：
Florian Kohnhäuser;André Schaller;S. Katzenbeisser
近年来，低端嵌入式设备越来越多地用于各种场景，从消费电子到工业设备。然而，这种演变使嵌入式设备成为软件盗版和软件操纵的有利可图的目标。低端嵌入式设备通常缺乏安全的硬件来有效地防止此类攻击，这加剧了这种情况。在这项工作中，我们提出了一种新的软件保护方案，这是特别适合于已经部署的低端嵌入式设备没有安全的硬件。我们的方法结合了基于自校验和代码与物理不可克隆功能（PUF）的技术，以建立一个硬件辅助的软件保护。通过这种方式，我们可以将软件实例的执行绑定到特定设备，并保护其程序代码免受操纵。我们表明，我们的软件保护方案提供了一个高水平的安全性对静态的对手，并证明动态的对手需要相当多的资源来执行一个成功的攻击。为了探索我们的解决方案的可行性，我们实现了基于ARM的低端商品微控制器的保护方案。进一步的性能评估表明，实现的解决方案表现出10%的公平开销。
In recent years, low-end embedded devices have been used increasingly in various scenarios, ranging from consumer electronics to industrial equipment. However, this evolution made embedded devices profitable targets for software piracy and software manipulation. Aggravating this situation, low-end embedded devices typically lack secure hardware to effectively protect against such attacks. In this work, we present a novel software protection scheme, which is particularly suited for already deployed low-end embedded devices without secure hardware. Our approach combines techniques based on self-checksumming code with Physically Unclonable Functions (PUFs) to establish a hardware-assisted software protection. In this way, we can tie the execution of a software instance to a specific device and protect its program code against manipulations. We show that our software protection scheme offers a high level of security against static adversaries and demonstrate that dynamic adversaries require considerable resources to perform a successful attack. To explore the feasibility of our solution, we implemented the protection scheme on an ARM-based low-end commodity microcontroller. A further performance evaluation shows that the implemented solution exhibits a fair overhead of ten percent.