TrackOS: A Security-Aware Real-Time Operating System

被引:12
|
作者
Pike, Lee [1 ]
Hickey, Pat [2 ]
Elliott, Trevor [1 ]
Mertens, Eric [1 ]
Tomb, Aaron [1 ]
机构
[1] Galois Inc, Portland, OR 97204 USA
[2] Helium, Portland, OR USA
来源
关键词
D O I
10.1007/978-3-319-46982-9_19
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
We describe an approach to control-flow integrity protection for real-time systems. We present TrackOS, a security-aware real-time operating system. TrackOS checks a task's control stack against a statically-generated call graph, generated by an abstract interpretation-based tool that requires no source code. The monitoring is done from a dedicated task, the schedule of which is controlled by the real-time operating system scheduler. Finally, we implement a version of software-based attestation (SWATT) to ensure program-data integrity to strengthen our control-flow integrity checks. We demonstrate the feasibility of our approach by monitoring an open source autopilot in flight.
引用
收藏
页码:302 / 317
页数:16
相关论文
共 50 条
  • [1] Security-aware Real-time Scheduling for Hypervisors
    Kashyap, Rekha
    Vidyarthi, D. P.
    [J]. 2014 IEEE 17TH INTERNATIONAL CONFERENCE ON COMPUTATIONAL SCIENCE AND ENGINEERING (CSE), 2014, : 1520 - 1527
  • [2] Multimode Security-Aware Real-Time Scheduling on Multiprocessors
    Ren, Jiankang
    Liu, Chunxiao
    Lin, Chi
    Jiang, Wei
    Wang, Pengfei
    Qi, Xiangwei
    Li, Simeng
    Li, Shengyu
    [J]. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 2024, 43 (11) : 3407 - 3418
  • [3] A Short Review of Security-Aware Techniques in Real-Time Embedded Systems
    Chai, Hongxia
    Zhang, Gongxuan
    Zhou, Junlong
    Sun, Jin
    Huang, Longxia
    Wang, Tian
    [J]. JOURNAL OF CIRCUITS SYSTEMS AND COMPUTERS, 2019, 28 (02)
  • [4] SAREC: A security-aware scheduling strategy for real-time applications on clusters
    Xie, T
    Qin, X
    Sung, A
    [J]. 2005 INTERNATIONAL CONFERENCE ON PARALLEL PROCESSSING, PROCEEDINGS, 2005, : 5 - 12
  • [5] An improved security-aware packet scheduling algorithm in real-time wireless networks
    Zhu, Xiaomin
    Guo, Hao
    Liang, Shaoshuai
    Yang, Xiaoling
    [J]. INFORMATION PROCESSING LETTERS, 2012, 112 (07) : 282 - 288
  • [6] Security-Aware Mapping for TDMA-Based Real-Time Distributed Systems
    Lin, Chung-Wei
    Zhu, Qi
    Sangiovanni-Vincentelli, Alberto
    [J]. 2014 IEEE/ACM INTERNATIONAL CONFERENCE ON COMPUTER-AIDED DESIGN (ICCAD), 2014, : 24 - 31
  • [7] Security-Aware Scheduling for TTEthernet-Based Real-Time Automotive Systems
    Zhao, Rui
    Qin, Guihe
    Lyu, Ying
    Yan, Jie
    [J]. IEEE ACCESS, 2019, 7 : 85971 - 85984
  • [8] Weight-balanced security-aware scheduling for real-time computational grid
    Kashyap, Rekha
    Vidyarthi, Deo Prakash
    [J]. INTERNATIONAL JOURNAL OF GRID AND UTILITY COMPUTING, 2011, 2 (04) : 313 - 325
  • [9] Security-Aware Scheduling for FlexRay-Based Real-Time Automotive Systems
    Zhao, R.
    Qin, G. H.
    Chen, H. P.
    Qin, J.
    Yan, J.
    [J]. MATHEMATICAL PROBLEMS IN ENGINEERING, 2019, 2019
  • [10] Security-Aware Mapping for CAN-Based Real-Time Distributed Automotive Systems
    Lin, Chung-Wei
    Zhu, Qi
    Phung, Calvin
    Sangiovanni-Vincentelli, Alberto
    [J]. 2013 IEEE/ACM INTERNATIONAL CONFERENCE ON COMPUTER-AIDED DESIGN (ICCAD), 2013, : 115 - 121