Reliable Real-Time Operating System for IoT Devices

Hahm, Seong-il; Kim, Jeongchan; Jeong, Ahreum; Yi, Hyunjin; Chang, Sunghan; Kishore, S; Chauhan, Amandeep; Cherian, Siju Punnoose

doi:10.1109/jiot.2020.3025612

Cited by 10 publications

(8 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Classic approaches to provide isolation and implement reliable systems on low-end embedded devices have been evolving from constructive (language/compiler-based) memory protection [58]- [62] and hardware-enforced RTOS mechanisms [21], [63], [64], to lightweight virtualization infrastructures [4], [5], [65], [66]. Tock [59] leverages limited hardware protection mechanisms as well as the type-safety features of the Rust programming language to provide a reliable multiprogramming environment for MCUs.…”

Section: Reliable Systems For Mcu-powered Iot Devicesmentioning

confidence: 99%

uTango: An Open-Source TEE for IoT Devices

2022

View full text Add to dashboard Cite

Security is one of the main challenges of the Internet of Things (IoT). IoT devices are mainly powered by low-cost microcontrollers (MCUs) that typically lack basic hardware security mechanisms to separate security-critical applications from less critical components. Recently, Arm has started to release Cortex-M MCUs enhanced with TrustZone technology (i.e., TrustZone-M), a system-wide security solution aiming at providing robust protection for IoT devices. Trusted Execution Environments (TEEs) relying on TrustZone hardware have been perceived as safe havens for securing mobile devices. However, for the past few years, considerable effort has gone into unveiling hundreds of vulnerabilities and proposing a collection of relevant defense techniques to address several issues. While new TEE solutions built on TrustZone-M start flourishing, the lessons gathered from the research community appear to be falling short, as these new systems are trapping into the same pitfalls of the past. In this paper, we present uTango, the first multi-world TEE for modern IoT devices. uTango proposes a novel architecture aiming at tackling the major architectural deficiencies currently affecting TrustZone(-M)-assisted TEEs. In particular, we leverage the very same TrustZone hardware primitives used by dual-world implementations to create multiple and equally secure execution environments within the normal world. We demonstrate the benefits of uTango by conducting an extensive evaluation on a real TrustZone-M hardware platform, i.e., Arm Musca-B1. uTango will be open-sourced and freely available on GitHub in hopes of engaging academia and industry on securing the foreseeable trillion IoT devices.

show abstract

Section: Reliable Systems For Mcu-powered Iot Devicesmentioning

confidence: 99%

uTango: An Open-Source TEE for IoT Devices

2022

View full text Add to dashboard Cite

show abstract

“…This incorporates sandbox behavior and improves the network performance. Other researches [22][23][24] suggest that security verification, threading for performance and security, domain parameter prediction for better attack mitigation, and high-speed IoT performance can be achieved via modifying the existing IoT kernels. Here, kernels like TizenOS, real-time kernel, and so on are modified in order to include these enhancements.…”

Section: Literature Reviewmentioning

confidence: 99%

Design of a quality of service‐aware fault‐proof secure Q‐learning‐based Internet of Things kernel patch with multipath and multichannel capabilities

Shankhpal

Hanumantha

2022

Int J Communication

View full text Add to dashboard Cite

Summary In recent times, the expeditious growth of Internet of Things (IoT) offers applications to ease day‐to‐day activities with minimum human effort. Once the IoT application installed, the connected devices perform their tasks without human intervention. Hence, the need of performance optimization and security enhancement is vital to minimize end‐to‐end communication delay, improve kernel‐level security, mitigate faults adaptively, and have suitable backup options in case of node failure. This paper proposes a quality of service (QoS)‐aware fault‐proof secure Q‐learning‐based IoT (QIoT) kernel‐level protocol that integrates multipath aggregation and fuzzy authentication for security, with multichannel communication for improved QoS. Especially, this protocol integrates a source‐level clustering mechanism based on Q‐learning that aims at reducing route search delay. In order to provide fault tolerance, the kernel is equipped with real‐time fault‐tolerance mechanism that is activated in case of node‐level faults. Due to integration of Q‐learning, computational overheads are reduced by over 15% when compared with Zephyr, AliOS, and RTX kernels. This reduction in computational overheads facilitates light‐weight behavior of the kernel, due to which other QoS parameters like energy consumption, throughput, and routing overhead are reduced. The proposed QIoT kernel‐level protocol is compared with standard kernel modules, and performance evaluation showcases an improvement in authentication security by 8%, end‐to‐end delay by 5%, energy efficiency by 25%, and fault mitigation by 18%, thereby assisting the use of the proposed kernel for real‐time deployments.

show abstract

“…Reliable systems for the IoT. Classic approaches to provide isolation and implement reliable systems on resourceconstrained devices have been evolving from constructive (language/compiler-based) memory protection [52]- [56] and hardware-enforced RTOS mechanisms [21], [57], [58], to lightweight virtualization infrastructures [5], [6], [59], [60]. Tock [53] leverages limited hardware protection mechanisms as well as the type-safety features of the Rust programming language to provide a reliable multiprogramming environment for MCUs.…”

Section: Related Workmentioning

confidence: 99%

“…Several widespread embedded (RT)OSes such as Mbed OS [61], FreeRTOS [62], and Zephyr [63] have already upstream support for task isolation using the MPU. In [21], Hahm et al have enhanced TizenRT with user-level reliability mechanisms, i.e., fault isolation and fault recovery. Another class of approaches have proposed lightweight virtualization solutions for resource-constrained devices.…”

Section: Related Workmentioning

confidence: 99%

uTango: an open-source TEE for IoT devices

Oliveira¹,

Gomes²,

Pinto³

2021

Preprint

View full text Add to dashboard Cite

Security is one of the main challenges of the Internet of Things (IoT). IoT devices are mainly powered by low-cost microcontrollers (MCUs) that typically lack basic hardware security mechanisms to separate security-critical applications from less critical components. Recently, Arm has started to release Cortex-M MCUs enhanced with TrustZone technology (i.e., TrustZone-M), a system-wide security solution aiming at providing robust protection for IoT devices. Trusted Execution Environments (TEEs) relying on TrustZone hardware have been perceived as safe havens for securing mobile devices. However, for the past few years, considerable effort has gone into unveiling hundreds of vulnerabilities and proposing a collection of relevant defense techniques to address several issues. While new TEE solutions built on TrustZone-M start flourishing, the lessons gathered from the research community appear to be falling short, as these new systems are trapping into the déjà vu pitfalls of the past. In this paper, we present UTANGO, the first multi-world TEE for modern IoT devices. UTANGO proposes a novel architecture aiming at tackling the major architectural deficiencies currently affecting TrustZone(-M)-assisted TEEs. In particular, we leverage the very same TrustZone hardware primitives used by dual-world implementations to create multiple, equally-secure execution environments within the normal world. We demonstrate the benefits of UTANGO by conducting an extensive evaluation on a real TrustZone-M hardware platform, i.e., Arm Musca-B1. UTANGO will be open-sourced and freely available on GitHub in hopes of engaging academia and industry on securing the foreseeable trillion IoT devices.

show abstract

Reliable Real-Time Operating System for IoT Devices

Cited by 10 publications

References 21 publications

uTango: An Open-Source TEE for IoT Devices

uTango: An Open-Source TEE for IoT Devices

Design of a quality of service‐aware fault‐proof secure Q‐learning‐based Internet of Things kernel patch with multipath and multichannel capabilities

uTango: an open-source TEE for IoT devices

Contact Info

Product

Resources

About