The Tome of Secure Compilation: Fully Abstract Compilation to Protected Modules Architectures ; Het boek van veilige compilatie: Volledig abstracte compilatie naar beschermende modulearchitecturen

Author:

Patrignani, Marco [claim]

Description:

1 Summary The goal of this research project is to enhance the security of networked, embedded computing devices. A networked, embeddedcomputing device consists of a hardware part and a software part; both components play an essential role in the overall security of a device. The software builds on hardware low level security blocks to provide higher-level guarantees such as process isolation, secure communication, or even application-specific security guarantees such as non- repudiation of transactions. On the general-purposenbsp;side, hardware soon became de factonbsp;and research on system security treated the underlying hardware as a given. System security was achieved in software,building on the standard hardware building blocks. Now that embedded devices are becoming more and more networked, and hence face new security threats, it is again important to look at the interaction between hardware security features and software security. Many embedded platforms lackthe standard security features (such as privilege levels or advanced memory management units) present in high-end processors, and extending such hardware platform with custom instructions or coprocessors to achieve betternbsp;guarantees for the overall system is a sensible and feasible path. So far there is little fundamental research on what the advantages, limits and trade-offs are of co-designing hardware and software for security purposes. This project aims to fill this void. The project will build a model of adaptive embedded networked systems that makes explicit the division between what is implemented in hardware and what insoftware. It will analyze the attacks that are possible against the hardware part and against the software part.nbsp;insights gained by this analysis will drive the design of new softwarenbsp;features. Finally this project will aim to fillingnbsp;void in hardware/software co-designfoundations fornbsp;systems. Additional challenges and opportunities arise for networked embedded systems. Thenbsp;facilitiesoffered by networked ...

Contributors:

Clarke, Dave; U0058331; ; Piessens, Frank; U0018905;

Year of Publication:

2015-05-27

Document Type:

Thesis ; TH ; doctoral_thesis ; 318134;Thesis ; [Doctoral and postdoctoral thesis]

Language:

DDC:

005 Computer programming, programs & data (computed)

Rights:

318134;public

Relations: