IOMPU: Spatial Separation for Hardware-Based I/O Virtualization for Mixed-Criticality Embedded Real-Time Systems Using Non-transparent Bridges

Muench, Daniel; Paulitsch, Michael; Herkersdorf, Andreas

doi:10.1109/hpcc-css-icess.2015.221

Cited by 6 publications

(1 citation statement)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this work, the IOMMU is embodied in a processor which connects the IOMMU with memories and peripherals using bridges. The IOMPU [12] takes advantage of the Non-Transparent Bridge (NTB) which isolates two hosts or memory domains yet allowing the exchange of data. Using the NTB, IOMPU can offer spacial isolation for I/O devices.…”

Section: Related Workmentioning

confidence: 99%

Toubkal: A Flexible and Efficient Hardware Isolation Module for Secure Lightweight Devices

Sensaoui¹,

Hély²,

Aktouf³

2019

2019 15th European Dependable Computing Conference (EDCC)

View full text Add to dashboard Cite

Toubkal is a new hardware architecture which provides secure, efficient and flexible hardware isolation. It is a modular system that offers strong separation of different hardware modules within a system. Lightweight devices use mainly a Memory Protection Unit (MPU) to protect the memory and create an isolation architecture. However, the MPU offers only a memory control access for the software running on the system. This scheme does not prevent other hardware components from accessing system memories. Toubkal aims to enhance these MPU architectures by adding a new hardware layer to create different access environments for different hardware components. Toubkal has been designed in such a way that it can easily be adapted to the system needs in terms of security, safety and performances. It does not require any change in the existing hardware modules. We present a detailed description of the architecture, then we compare and discuss run-time, area overhead as well as security limitations using different policies and options. The first experimental hardware module increases between 0.08% and 8.5% a single core Rocket Chip cells area.

show abstract

Section: Related Workmentioning

confidence: 99%