Paper
16 October 2024 Vulnerability exploitation mitigation technology based on heterogeneous redundant embedded terminals
Dalong Zhang, Benchao Liang, Yan Cao
Author Affiliations +
Proceedings Volume 13291, Ninth International Symposium on Advances in Electrical, Electronics, and Computer Engineering (ISAEECE 2024); 132913M (2024) https://doi.org/10.1117/12.3033922
Event: Ninth International Symposium on Advances in Electrical, Electronics, and Computer Engineering (ISAEECE 2024), 2024, Changchun, China
Abstract
Embedded controller chips play an important role in IoT, vehicle-to-everything, industrial internet, and other fields. However, with the proliferation of the Internet of Things, embedded terminal devices accessing the network face a great risk of vulnerability attacks. Due to the limited resources and high real-time requirement of embedded devices, traditional desktop operating system security measures are difficult to transplant and deploy. This paper proposes a mitigation strategy to maximize vulnerability of embedded systems based on ARM architecture. Based on the theory of moving target defense and the idea of heterogeneous redundant actuator, an equivalent variant is constructed to mitigate the attack of buffer overflow vulnerability. The hardware resources include IROM, IRAM, and the main controller STM32F103VET6 of the Cortex-M3 kernel, thus building heterogeneous redundant actuator and reducing the probability of embedded system intrusion. After implementing the heterogeneous redundant actuator of the embedded system, theoretical verification is also carried out in combination with the ARM-Shellcode experiment. The experimental results show that the proposed method can alleviate the attack using the buffer overflow vulnerability type.
(2024) Published by SPIE. Downloading of the abstract is permitted for personal use only.
Dalong Zhang, Benchao Liang, and Yan Cao "Vulnerability exploitation mitigation technology based on heterogeneous redundant embedded terminals", Proc. SPIE 13291, Ninth International Symposium on Advances in Electrical, Electronics, and Computer Engineering (ISAEECE 2024), 132913M (16 October 2024); https://doi.org/10.1117/12.3033922
Advertisement
Advertisement
RIGHTS & PERMISSIONS
Get copyright permission  Get copyright permission on Copyright Marketplace
KEYWORDS
Actuators

Embedded systems

Defense and security

Printing

Computer security

Information security

Internet of things

Back to Top