Affordable Separation on Embedded Platforms: Soft Reboot Enabled Virtualization on a Dual Mode System
2014 (English)In: / [ed] Thorsten Holz, Sotiris Ioannidis, Springer, 2014, -54 p.Conference paper (Refereed)
While security has become important in embedded systems, commodity operating systems often fail in effectively separating processes, mainly due to a too large trusted computing base. System virtualization can establish isolation already with a small code base, but many existing embedded CPU architectures have very limited virtualization hardware support, so that the performance impact is often non-negligible. Targeting both security and performance, we investigate an approach in which a few minor hardware additions together with virtualization offer protected execution in embedded systems while still allowing non-virtualized execution when secure services are not needed. Benchmarks of a prototype implementation on an emulated ARM Cortex A8 platform confirm that switching between those two execution forms can be done efficiently.
Place, publisher, year, edition, pages
Springer, 2014. -54 p.
Dual Mode, Separation, Soft Reboot, Virtualization, Hypervisor, Embedded Systems, Security
Research subject Computer Science
IdentifiersURN: urn:nbn:se:kth:diva-147612DOI: 10.1007/978-3-319-08593-7_3ISBN: 978-3-319-08592-0ISBN: 978-3-319-08593-7OAI: oai:DiVA.org:kth-147612DiVA: diva2:731019
FunderSwedish Foundation for Strategic Research
This is the author version of the correspondent paper published in the proceedings of TRUST 2014 (editors: Thorsten Holz, Sotiris Ioannidis), Springer LNCS 8564. The publisher is Springer International Publishing Switzerland. The final publication is available at http://link.springer.com/10.1007/978-3-319-08593-7_3.
QC 201407082014-06-302014-06-302016-09-12Bibliographically approved