文章基本信息

标题：Attack Detection Through Monitoring of Timing Deviations in Embedded Real-Time Systems
本地全文：下载
作者：Nicolas Bellec ; Simon Rokicki ; Isabelle Puaut 等
期刊名称：LIPIcs : Leibniz International Proceedings in Informatics
电子版ISSN：1868-8969
出版年度：2020
卷号：165
页码：8:1-8:22
DOI：10.4230/LIPIcs.ECRTS.2020.8
出版社：Schloss Dagstuhl -- Leibniz-Zentrum fuer Informatik
摘要：Real-time embedded systems (RTES) are required to interact more and more with their environment, thereby increasing their attack surface. Recent security breaches on car brakes and other critical components have already proven the feasibility of attacks on RTES. Such attacks may change the control-flow of the programs, which may lead to violations of the systemâs timing constraints. In this paper, we present a technique to detect attacks in RTES based on timing information. Our technique, designed for single-core processors, is based on a monitor implemented in hardware to preserve the predictability of instrumented programs. The monitor uses timing information (Worst-Case Execution Time - WCET) of code regions to detect attacks. The proposed technique guarantees that attacks that delay the run-time of any region beyond its WCET are detected. Since the number of regions in programs impacts the memory resources consumed by the hardware monitor, our method includes a region selection algorithm that limits the amount of memory consumed by the monitor. An implementation of the hardware monitor and its simulation demonstrates the practicality of our approach. In particular, an experimental study evaluates the attack detection latency.
关键词：Real-time systems; security; attack detection; control flow hijacking; WCET estimation; hardware monitoring