HardBlare: an efficient hardware-assisted DIFC for non-modified embedded processors

Pascal Cotret (1) , Guillaume Hiet (2) , Guy Gogniat (3) , Vianney Lapotre (3)

1 IETR - Institut d'Électronique et des Technologies du numéRique
2 CIDRE - Confidentialité, Intégrité, Disponibilité et Répartition
3 Lab-STICC_UBS_CACS_MOCS

Information Flow Control is a security mechanisms that provides security guarantees about information propagation. Other security mechanisms such as access control or cryptography can be used to limit the dissemination of confidential information and the modification of high integrity contents. However, they do not enforce end-to-end properties. They cannot control the dissemination of information once file access is allowed or the data is decrypted. In this context, HardBlare proposes a software/hardware codesign methodology to ensure that security properties are preserved all allong the execution of the system but also during files storage. The general context of HardBlare is to address Dynamic Information Flow Control (DIFC) that generally consists in attaching marks (also known as tags) to denote the type of information that are saved or generated within the system.

Domaines: Architectures Matérielles [cs.AR]; Cryptographie et sécurité [cs.CR]; Systèmes embarqués

Pascal Cotret, Guillaume Hiet, Guy Gogniat, Vianney Lapotre. HardBlare: an efficient hardware-assisted DIFC for non-modified embedded processors. CHES 2015 - Workshop on Cryptographic Hardware and Embedded Systems, Sep 2015, Saint-Malo, France. 2015. ⟨hal-01252597⟩