A lightweight kernel objects monitoring infrastructure for embedded systems

Research output: Chapter in Book/Report/Conference proceedingConference contribution

6 Citations (Scopus)

Abstract

In this paper, a lightweight system level monitoring infrastructure known as Kernel Objects Monitoring Infrastructure (KOMI) is presented for commercial-off-the-shelf (COTS) embedded systems. The kernel objects consist of certain critical kernel data structures and entry points of system calls, which are protected as first-class objects inside the system. KOMI provides specific runtime protections to different kernel objects: kernel data structures are protected by the periodic detection and recovery, the interception of arguments is used to protect vulnerable system calls. Both protection methods can provide not only consistency regulations but also recovery actions for the system. During its runtime deployment, once any system inconsistency has been detected, predefined recovery actions will be invoked. Since KOMI requires few modifications to kernel source code, it is easy to integrate into existing embedded systems. The evaluation experiment results indicate our prototype system can correctly detect the inconsistent kernel data structures caused by security attacks and also prevent kernel from exploits due to vulnerable system calls with acceptable penalty to the system performance. Moreover, KOMI is fully software-based without introducing any specific hardware and requires no modifications to system call APIs, therefore legacy applications can be also easily reused.

Original languageEnglish
Title of host publicationProceedings - 14th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, RTCSA 2008
Pages55-60
Number of pages6
DOIs
Publication statusPublished - 2008 Oct 15
Event14th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, RTCSA 2008 - Kaohsiung, Taiwan, Province of China
Duration: 2008 Aug 252008 Aug 27

Publication series

NameProceedings - 14th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, RTCSA 2008

Conference

Conference14th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, RTCSA 2008
CountryTaiwan, Province of China
CityKaohsiung
Period08/8/2508/8/27

ASJC Scopus subject areas

  • Computer Science Applications
  • Hardware and Architecture
  • Control and Systems Engineering
  • Electrical and Electronic Engineering

Fingerprint Dive into the research topics of 'A lightweight kernel objects monitoring infrastructure for embedded systems'. Together they form a unique fingerprint.

  • Cite this

    Sun, L., & Nakajima, T. (2008). A lightweight kernel objects monitoring infrastructure for embedded systems. In Proceedings - 14th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, RTCSA 2008 (pp. 55-60). [4617273] (Proceedings - 14th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, RTCSA 2008). https://doi.org/10.1109/RTCSA.2008.16