Enforcing security for real-time multicore embedded system

摘要

Most of the complex real-time embedded control systems are composed of security-critical system and non-security-critical system, and consolidating them into a single hardware is a development trend. For security requirements of such systems, in this paper, a secure and reliable multi-core architecture of real-time embedded system is proposed, which has a malicious behavior detection mechanism and guarantees a lossless control. Introducing a hypervisor software layer, it realizes the consolidation of security-critical and non-security-critical system into a multicore processor and complete isolation. The execution behavior of control application is detected by the instruction stream tracking module and security core in the security-critical part which uses two cores. The proposed detection algorithm uses hashing operation to mask the complexity introduced by the instruction set diversity, which makes the detection has universal applicability to the embedded systems with various instruction set. The experimental results show that this method can detect unplanned code execution with minimum granularity, and with small average detection latency.