Achilles' Head: Understanding the Challenges in Implementing Dependable and Secure Deeply Networked Military Embedded Systems

摘要

Embedded computing is an essential part of our military capacity. Experience with traditional information technology (IT) systems has made it abundantly clear that computing systems are subject to attacks, and that including security in the design process is a critical component in the development of new systems. However, developing secure embedded systems is not a simple matter of transferring security techniques from traditional information technology environments. Due to the strenuous operational environment, frequent interaction with the physical world, and software application domain of embedded computer systems, traditional software and enterprise approaches to achieving dependability and security are only partially effective in securing embedded systems. This paper will summarize basic concepts of traditional systems' dependability and security, and their applicability to embedded systems. Constraints inherent in embedded systems will be discussed and threats to dependability and security summarized. The conceptual gap between regarding security as merely the process of securing communication channels and developing truly secure, deeply networked, embedded systems resistant to all manner of attacks will be explored. Last will be a brief discussion of current best practices for attempting to achieve the appropriate level of dependability in embedded systems, up to and including ultra-reliable systems.