Security Analysis of Linux Kernel Features for Embedded Software Systems in Vehicles

Ludwig Thomeczek (1, 2)

1 University of Applied Sciences Landshut
2 BMW Car IT GmbH

This paper describes different safety and security mechanisms implemented in the Linux kernel to prevent and protect against accidental or malicious misbehaviour in user applications. First, we present a generic system model for user applications with different levels of criticality and deterministic behaviour. From this, a theoretical model for failure modes and attack scenarios on the stability of the operating system and concurrently executed user applications is derived. Then, technologies in the Linux kernel to counter the identified failure modes and attack scenarios are examined and compared. Current work in progress is to implement requirement-based tests for these security measures and assess their effectiveness, efficiency and limits.

Mots clés: security; safety; embedded; vehicle; operating systems; Linux

Domaines: Calcul parallèle, distribué et partagé [cs.DC]

Ludwig Thomeczek. Security Analysis of Linux Kernel Features for Embedded Software Systems in Vehicles. CARS 2015 - Critical Automotive applications: Robustness & Safety, Sep 2015, Paris, France. ⟨hal-01193025⟩