Building secure embedded kernels with the Think architecture.

Christophe Rippert (1, 2, 3) , Jean-Bernard Stefani (2)

1 VERIMAG - IMAG - VERIMAG
2 SARDES - System architecture for reflective distributed computing environments
3 POPS - System and Networking for Portable Objects Proved to be Safe

We present in this paper the security features of Think, an object-oriented architecture dedicated to build customized operating system kernels. The Think architecture is composed of an object-oriented software framework including a trader, and a library of system abstractions programmed as components. We show how to use this architecture to build secure and efficient kernels for embedded systems. Policy- neutral security is achieved by providing elementary tools that can be used by the system programmer to build a system resistant to denial of service attacks and incorporating data access control. An example of such a secure system is given by detailing how to ensure component isolation with a elementary software-based memory isolation tool.

Domaines: Systèmes embarqués

Christophe Rippert, Jean-Bernard Stefani. Building secure embedded kernels with the Think architecture.. Workshop on Engineering Context-aware Object-Oriented Systems and Environments, in association with the 17th ACM OOPSLA conference, Nov 2002, Seattle, United States. ⟨hal-00310149⟩