Identification and Verification of Security Relevant Functions in Embedded Systems Based on Source Code Annotations and Assertions

Abstract

Abstract. Most modern embedded systems include an operating system. Not all functions in the operating systems have to fulfill the same security requirements. In this work we 1 propose a mechanism to identify and maintain functions that have to meet strict security needs. This mechanism is based on annotations representing security constrains and assertions to check these security annotations during the verification phase of the system under development.

User Centric Security Model for Tamper-Resistant Devices

“…In addition, Loining et al [229] used the Java annotations to ensure a secure and reliable development of applications for embedded devices (e.g. smart cards).…”