Local-Memory-Based Integrity Checking for Embedded Systems
Local-Memory-Based Integrity Checking for Embedded Systems
复制标题
DOI：
10.1109/cse.2013.114
复制
发表时间：
2013-12
期刊：
影响因子：
--
通讯作者：
Ning Li;T. Nakajima
中科院分区：
文献类型：
--
作者：
Ning Li;T. Nakajima
为了提高具有较小可信计算基础（TCB）的多核处理器的安全性，提出了有限本地内存（LLM）机器架构。它使用一个特权核的本地内存执行检测工具来监视运行在其他核上的目标操作系统的状态，依赖于特权核的隔离来确保检测工具的可靠性。它具有一些适合嵌入式系统的特性，例如导致开销小，TCB小，并且需要对目标操作系统进行最小的修改。然而，在当前的研究中，LLM架构仅在虚拟机监视器QEMU中进行仿真，并且假设有限的并且在某种程度上很大的本地存储器空间，这在嵌入式处理器上可能很少配备。在本文中，我们将这种方法应用到一个真实的嵌入式平台与LLM类似的硬件配置，但配备了一个小得多的本地存储器。首先，我们提出设计细节，将我们的系统应用到这样一个小尺寸的本地存储器。然后，我们评估的影响，这种方法会造成的检测工具，并提出了一些硬件建议，使LLM架构更适用于真实的处理器。我们的研究可以说明LLM架构的效率，并推广它的应用，嵌入式系统，通过减少对本地存储器的大小要求。
The Limited Local Memory (LLM) machine architecture is proposed to improve the security on a multi-core processor with a small trusted computing base (TCB). It uses one privileged core's local memory for executing detection tools to monitor the state of a target OS running on other cores, depending on isolation of the privileged core to ensure the reliability of the detection tools. It has some characteristics fitting embedded systems, such as causing little overhead, a small TCB and requiring minimal modification on the target OS. However, in current research, the LLM architecture was only emulated in QEMU, a virtual machine monitor, and assumed a limited and somehow big space of the local memory that may rarely be equipped on embedded processors. In this paper, we apply this method to a real embedded platform with a LLM-similar hardware configuration, but equipped with a much smaller local memory. Firstly, we propose design details to apply our system to a local memory with such a small size. Then we evaluate the influence that this method would cause to the detection tools and present some hardware recommendations to make the LLM architecture more applicable on real processors. Our research can illustrate the efficiency of the LLM architecture and generalize the application of it for embedded systems by reducing the size requirement on the local memory.