Towards a Security Domain Model for Embedded Systems

Abstract

Embedded devices are increasingly involved in applications that store, access, and manipulate sensitive information. This creates a need for protecting such devices from security threats. However, resource-constrained nature of these de- vices does not allow engineers to apply conventional security mechanisms in a straight forward manner. For instance, Ravi et al. identify resource-oriented gaps which are related to incorporating security solutions in embedded devices; in particular, the so-called battery and processing power gaps. To address these issues we propose to shift security considerations to earlier development stages, and support the embedded engineer in incorporating security solutions

Embedded Systems Security: A Survey of EU Research Efforts

“…Some approaches in current research focus on providing fully featured frameworks and/or formalising the process of designing and developing secure and dependable embedded systems, especially in applications where safety is critical. In , the two distinct domains of embedded systems and security are considered, and an appropriate view of a final system model is provided, aiming to support cooperation between the two domains, while leaving them independent from each other. The proposed scheme is intended for on‐demand provision of communication services in crisis‐related situations, where different actors could be involved, also bearing heterogeneous client devices.…”

Analysis and composition of security primitives towards a framework that safeguards the confidentiality, integrity and availability of embedded systems

“…Some approaches in current research focus on providing fully-featured frameworks and/or formalising the process of designing and developing secure and dependable embedded systems, especially in applications where safety is critical. In [342], the two distinct domains of embedded systems and security are considered, and an appropriate view of a final system model is provided, aiming to support cooperation between the two domains, while leaving them independent from each other. The proposed scheme is intended for on-demand provision of communication services in crisis-related situations, where different actors could be involved, also bearing heterogeneous client devices.…”