EMBOSOM - Emigrating Embedded Software Security into Modern Emerging Hardware Paradigms

EMBOSOM - 将嵌入式软件安全迁移到现代新兴硬件范例中

• 批准号: 535695900
• 负责人: Professor Dr. Rolf Drechsler
• 金额: --
• 依托单位: Cyber-Physical Systems Group (CPS)
• 依托单位国家: 德国
• 项目类别: Priority Programmes
• 资助国家: 德国
• 项目状态: 未结题
• 来源: https://gepris.dfg.de/gepris/projekt/535695900?language=en
• 关键词: EMBOSOM; Emigrating; Embedded; Software; Security

In order to protect software against the exploitation of vulnerabilities, it is paramount to have sufficient protection mechanisms in place. This is especially important in the embedded domain, where such vulnerabilities can cause harm in the real world. However, prior work has shown that common software protection mechanisms are not available in this domain. While state-of-the-art protection mechanisms are mainly implemented in software, an emerging research direction is implementing such techniques directly in the hardware. Unfortunately, existing work in this domain targets non-constrained conventional devices which have a different threat model. Furthermore, existing work on such hardware protection mechanisms imposes a significant impact on essential characteristics of the embedded domain such as chip size, performance, and production costs. We want to develop a novel hardware-based security mechanism which is specifically tailored to the threat model of the embedded domain and leverages emerging technologies (e.g. memristor-based in-memory computing) to reduce the impact on performance, power consumption, and chip size. The proposal belongs to research area 3 (Secure Composition and Integration) and the interdisciplinary group on secure processing via hardware-supported data separation and isolation (IG2) of the call's matrix.

为了保护软件免受漏洞的利用，最重要的是要有足够的保护机制。这在嵌入式领域尤其重要，因为这样的漏洞可能会在现实世界中造成危害。然而，先前的工作表明，在该领域中不能使用常见的软件保护机制。虽然最先进的保护机制主要在软件中实现，但一个新兴的研究方向是直接在硬件中实现此类技术。不幸的是，该领域的现有工作针对的是具有不同威胁模型的非受限传统设备。此外，现有的关于这种硬件保护机制的工作对嵌入式领域的基本特征，如芯片大小、性能和生产成本施加了重大影响。我们希望开发一种新的基于硬件的安全机制，该机制专门针对嵌入式领域的威胁模型而定制，并利用新兴技术(例如基于忆阻器的内存计算)来降低对性能、功耗和芯片尺寸的影响。该提案属于研究领域3(安全合成和集成)和通过调用矩阵的硬件支持的数据分离和隔离(IG2)进行安全处理的跨学科小组。