Enforcing the security of component-based embedded systems with Information Flow Control

Information Flow Control (IFC) is mandatory to enforce the confidentiality and the integrity of data. It is a technique implemented in recent operating systems to track the information flow in the applications and therefore detect security leakage. In this paper, we apply this technique to a component-based Framework for securing embedded systems. We demonstrate the gain the component-based architecture provides to extend the Framework with no visible overhead on the nominal execution of the system.