CSR---EHS: Hardware/Software Architectures for Secure Embedded Systems

许多嵌入式系统处理敏感数据或执行关键功能，这使得安全性成为一个重要的考虑因素。虽然其中一些威胁在桌面系统中很常见，但桌面的通用性和组成它的组件的商品性阻碍了有意义的体系结构对策的部署。这种限制在嵌入式系统中不那么严格，允许研究新的安全方法，涵盖系统架构设计的方方面面。然而，这类系统在处理能力和电池容量方面受到严重的资源限制。因此，纯软件安全解决方案可能会压倒这些能力。第一个目标包括开发硬件/软件设计方法以支持资源受限的嵌入式系统中的可信平台模块(TPM)功能。TPM充当包含TPM的系统的信任根，提供安全存储、平台配置测量的安全报告和密钥生成等功能。据报道，到2010年，TPM的出货量将达到2.5亿台，这将推动这一研究。第二个目标包括设计一个能够执行系统级安全策略的安全感知SoC通信体系结构。第三个目标包括开发技术以促进类型安全软件的部署

Many embedded systems handle sensitive data or perform critical functions, making security an important consideration. While some of these threats are common in desktop systems, the general-purpose nature of a desktop and the commodity nature of the components comprising it prevent the deployment of meaningful architectural countermeasures. Such restrictions are less stringent in embedded systems, permitting the investigation of new security approaches, covering all aspects of system architecture design. However, such systems are severely resource-constrained in processing and battery capacities. Thus, purely software security solutions can overwhelm these capacities. Providing a secure implementation requires security measures that span various components in the system-on-chip (SoC), including hardware and software.The aim of this research is to develop design methodologies to obtain efficient hardware/software implementations that can facilitate secure program execution or implement a given security policy in embedded systems. The first objective includes developing hardware/software design methodologies to support trusted platform module (TPM) functionality in resource-constrained embedded systems. TPM acts as a root of trust for the system that contains it, providing capabilities for secure storage, secure reporting of platform configuration measurements, and cryptographic key generation, among other functions. It is reported that by 2010, shipments of TPMs will reach 250 million, giving impetus to this research. The second objective includes design of a security-aware SoC communication architecture that can enforce a system-level security policy. The third objective includes developing techniques to facilitate the deployment of type-safe software