A framework for defending embedded systems against software attacks

Najwa Aaraj, Anand Raghunathan, Niraj K. Jha

Research output: Contribution to journalArticlepeer-review

1 Scopus citations

Abstract

The incidence of malicious code and software vulnerability exploits on embedded platforms is constantly on the rise. Yet, little effort is being devoted to combating such threats to embedded systems. Moreover, adapting security approaches designed for general-purpose systems generally fails because of the limited processing capabilities of their embedded counterparts. In this work, we evaluate a malware and software vulnerability exploit defense framework for embedded systems. The proposed framework extends our prior work, which defines two isolated execution environments: a testing environment, wherein an untrusted application is first tested using dynamic binary instrumentation (DBI), and a real environment, wherein a program is monitored at runtime using an extracted behavioral model, along with a continuous learning process. We present a suite of software and hardware optimizations to reduce the overheads induced by the defense framework on embedded systems. Software optimizations include the usage of static analysis, complemented with DBI in the testing environment (i.e., a hybrid software analysis approach is used). Hardware optimizations exploit parallel processing capabilities of multiprocessor systems-on-chip. We have evaluated the defense framework and proposed optimizations on the ARM-Linux operating system. Experiments demonstrate that our framework achieves a high coverage of considered security threats, with acceptable performance penalties (the average execution time of applications goes up to 1.68X, considering all optimizations, which is much smaller than the 2.72X performance penalty when no optimizations are used).

Original languageEnglish (US)
Article number33
JournalTransactions on Embedded Computing Systems
Volume10
Issue number3
DOIs
StatePublished - Apr 1 2011

All Science Journal Classification (ASJC) codes

  • Software
  • Hardware and Architecture

Keywords

  • Behavioral analysis
  • Embedded systems
  • Instrumentation
  • Malware
  • Multiprocessor systems
  • Software vulnerabilities

Fingerprint Dive into the research topics of 'A framework for defending embedded systems against software attacks'. Together they form a unique fingerprint.

Cite this