Security Enhanced Linux on embedded systems: A hardware-accelerated implementation

Author

Fiorin, Leandro ; Ferrante, Alberto ; Padarnitsas, Konstantinos ; Regazzoni, Francesco

Author_Institution

Fac. of Inf., Univ. della Svizzera italiana, Lugano, Switzerland

fYear

2012

fDate

Jan. 30 2012-Feb. 2 2012

Firstpage

29

Lastpage

34

Abstract

Security Enhanced Linux implements fine-grained mandatory access control. Despite its usefulness, the overhead of implementing it on embedded devices is prohibitive. Therefore, in the past it has been proposed to accelerate SELinux by means of dedicated hardware; in this work we demonstrate the feasibility of such an approach by implementing a hardware accelerator for SELinux on a FPGA-based platform. Our implementation obtains a huge reduction in the performance overhead and energy consumption of SELinux, yet employing a limited chip area.

Keywords

Linux; authorisation; embedded systems; field programmable gate arrays; FPGA-based platform; dedicated hardware; embedded system; energy consumption reduction; fine-grained mandatory access control; hardware accelerator; hardware-accelerated implementation; performance overhead reduction; security enhanced Linux; Automatic voltage control; Benchmark testing; Computer aided manufacturing; Hardware; Linux; Random access memory; Software;

fLanguage

English

Publisher

ieee

Conference_Titel

Design Automation Conference (ASP-DAC), 2012 17th Asia and South Pacific

Conference_Location

Sydney, NSW

ISSN

2153-6961

Print_ISBN

978-1-4673-0770-3

Type

conf

DOI

10.1109/ASPDAC.2012.6164960

Filename

6164960