Embedded System Security: An Overview and Analysis of Attack Profiles and Defense Strategies

摘要

As our electronic devices take on more and more responsibilities, we are pushing an increasing volume of our personal information into our cellphones, media players, set-top boxes, and other appliances. As a result, embedded security now encompasses the full spectrum of privacy concerns, ranging from protecting the integrity of credit card transactions on a point-of-sale (POS) terminal to protecting private voicemail. In this survey we review basic attack profiles and system vulnerabilities and discuss best defense practices. We look at system hardening from the standpoint of hardware, software, and mixed hardware/software elements, such as secure boot and hypervisor control of memory.