Hardware Assisted Address Monitoring System

Abstract

Security is emerging as an important concern in embedded system design. Security of an embedded system is compromised when software that can be trusted is resulting in unintended behaviour such as leakage of sensitive data and execution of spiteful code. Several counter measures have been proposed to counteract these sorts of intrusions. The general idea behind most of the methods is to define the security policy at system level and check for security breach either statically or at run time. A hardware assisted run time address monitoring system is presented here to enhance embedded system security by detecting and preventing unintended program behaviour. The embedded processor is augmented with the hardware monitor that observes the dynamic execution trace of the processor. It checks whether the execution trace falls within the allowed program behaviour, and flags any deviation from the expected behaviour. This technique can counteract several common software and physical attacks. Furthermore it can ensure secure program execution with minimal overheads.