kth.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Minimal partitioning kernel with time protection and predictability
KTH, School of Electrical Engineering and Computer Science (EECS), Computer Science, Theoretical Computer Science, TCS.ORCID iD: 0000-0002-7355-4288
2024 (English)In: Proceedings - 9th IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2024, Institute of Electrical and Electronics Engineers (IEEE) , 2024, p. 234-241Conference paper, Published paper (Refereed)
Abstract [en]

We assess the effectiveness of the temporal fence instruction, introduced by Wistoff et al. (2023), primarily in enhancing both security and timing predictability for embedded systems. Originally demonstrated to eliminate microar-chitectural side-channels by flushing the on-core microarchitectural state using the seL4 kernel, we extend the evaluation of the temporal fence to a minimal kernel using RISe- V's PMP to protect applications, examining its implications for both security and safety. Our experiments demonstrate that by using scratchpad memory and the temporal fence, we can improve the security and time predictability of applications on both embedded and application-level processors. Furthermore, we find that the performance overhead introduced by the temporal fence remains within acceptable limits for hard real-time systems, which demonstrates the temporal fence's potential in securing applications against side-channel attacks while enhancing system reliability.

Place, publisher, year, edition, pages
Institute of Electrical and Electronics Engineers (IEEE) , 2024. p. 234-241
Keywords [en]
constrained devices, embedded devices, mpu, safety, security, separation kernel, spatial partitioning, tee, temporal partitioning, time protection
National Category
Computer Sciences Computer Engineering
Identifiers
URN: urn:nbn:se:kth:diva-353501DOI: 10.1109/EuroSPW61312.2024.00031ISI: 001302657400025Scopus ID: 2-s2.0-85203000226OAI: oai:DiVA.org:kth-353501DiVA, id: diva2:1899176
Conference
9th IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2024, July 8-12, 2024, Vienna, Austria
Note

Part of ISBN: 9798350367294

QC 20240926

Available from: 2024-09-19 Created: 2024-09-19 Last updated: 2024-10-30Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Karlsson, Henrik A.

Search in DiVA

By author/editor
Karlsson, Henrik A.
By organisation
Theoretical Computer Science, TCS
Computer SciencesComputer Engineering

Search outside of DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric score

doi
urn-nbn
Total: 23 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf