Authors:
Letitia W. Li
1
;
Florian Lugou
2
and
Ludovic Apvrille
2
Affiliations:
1
Télécom ParisTech and Institut VEDECOM, France
;
2
Télécom ParisTech, France
Keyword(s):
Embedded Systems, Partitioning, ProVerif, Formal Verification.
Related
Ontology
Subjects/Areas/Topics:
Applications and Software Development
;
Languages, Tools and Architectures
;
Methodologies, Processes and Platforms
;
Model Execution and Simulation
;
Model Transformation
;
Model Transformations and Generative Approaches
;
Model-Driven Architecture
;
Model-Driven Software Development
;
Models
;
Paradigm Trends
;
Software Engineering
Abstract:
The rising wave of attacks on communicating embedded systems has exposed their users to risks of information
theft, monetary damage, and personal injury. Through improved modeling and analysis of security, we
propose that these flaws could be mitigated. Since HW/SW partitioning, one of the first phases, impacts future
integration of security into the system, this phase would benefit from supporting modeling security abstractions
and security properties, providing designers with useful partitioning feedback obtained from a security
formal analyzer.
In this paper, we present how our toolkit supports security modeling, automated security integration, and formal
analysis during the HW/SW partitioning phase for secure communications in embedded systems. We
introduce “Cryptographic Configurations”, an abstract representation of security that allows us to verify security
formally. Our toolkit further assists designers by automatically adding these security representations
based on a mapping
and security requirements.
(More)