Hardware-assisted Security Enhanced Linux in Embedded Systems: a Proposal
Additional information
Authors
Fiorin L.,
Ferrante A.,
Padarnitsas K.,
Carucci S.
Type
Article in conference proceedings
Year
2010
Language
English
Abstract
As computing and communications increasingly pervade our lives, security and protection of sensitive data and systems are emerging as extremely important issues. This is especially true for embedded systems, often operating in non-secure environments, and with limited amount of computational, storage, and communication resources available. In servers and desktop systems, Security Enhanced Linux (SELinux) is currently used as a method to enhance security by enforcing a security control based on policies that confine user programs, or processes, to the minimum amount of privileges that they require for their execution. While providing a powerful mean for enhancing security in UNIX-like systems, SELinux still remains a feature that is too heavy to be fully supported by constrained devices. In this paper, we propose a hardware architecture for enhancing security and accelerating retrieval and applications of SELinux policies in embedded processors. We describe the general ideas be hind our work, discussing motivations, advantages, and limits of the solution proposed, while suggesting the main steps needed to implement the described architecture on common embedded processors.
Conference proceedings
Proceedings of the 5th Workshop on Embedded Systems Security (WESS''2010)
Month
October
Meeting place
Scottsdale, Arizona, USA
Keywords
access controls, embedded systems, SELinux
