Hardware virtualization based security solution for embedded systems

Author

Lukacs, Sandor ; Lutas, Andrei V. ; Lutas, Dan H. ; Sebestyen, Gheorghe

Author_Institution

Bitdefender, Cluj-Napoca, Romania

fYear

2014

fDate

22-24 May 2014

Firstpage

1

Lastpage

6

Abstract

We describe the implementation and the evaluation of a hypervisor level, hardware-enforced security solution suitable for the latest embedded platforms. Our solution is based on thin layer bare-metal hypervisor, a memory introspection engine and is validated on Silvermont microarchitecture based Intel x86 processors, running Windows. The approach is well suited to enhance the security of many POS and industrial embedded devices. We also present various kinds of attacks our solution defends against, and several remaining limitations.

Keywords

embedded systems; invasive software; virtualisation; Intel x86 processors; POS; Silvermont microarchitecture; Windows; attacks; embedded platforms; embedded systems; hardware virtualization based security solution; hardware-enforced security solution; hypervisor level; industrial embedded devices; malware; memory introspection engine; thin layer bare-metal hypervisor; Embedded systems; Hardware; Kernel; Security; Virtual machine monitors; Virtualization; Silvermont; embedded; hypervisor; introspection; malware; security; virtualization;

fLanguage

English

Publisher

ieee

Conference_Titel

Automation, Quality and Testing, Robotics, 2014 IEEE International Conference on

Conference_Location

Cluj-Napoca

Print_ISBN

978-1-4799-3731-8

Type

conf

DOI

10.1109/AQTR.2014.6857879

Filename

6857879