A Security Framework for Ethernet Based Embedded Web Server

Abstract

The enormous growth of the internet and its foray into every corner of our life makes it an indispensable tool to work with. The integration of the ubiquitous internet with embedded devices brings about a plethora of applications. It is a better choice for these devices to be embedded a web server. The embedded web server technology is a combination of embedded device and internet technology. As there is something like internet involved, there are enough chances that the web server might be attacked. This paper proposes a 3 layer ACA security framework which provides Authentication, Confidentiality and Availability for a tamper proof secured access to the internet enabled embedded web server. We have demonstrated the capability of a low cost rabbit 3710 based embedded web server module by implementing SSL protocol stack and also the capability to detect DOS attacks on Embedded Web Server using synfindiff and finite state machine algorithm. We found that TCP finite state machine algorithm performed well with faster detection time that the synfindiff algorithm.