Towards Dynamic Software Diversity for Resilient Redundant Embedded Systems

Höller, Andrea; Rauter, Tobias; Iber, Johannes; Kreiner, Christian

doi:10.1007/978-3-319-23129-7_2

Cited by 4 publications

(4 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Diversity (usually in conjunction with Redundancy [Sterbenz14]) is a well-established technique for improving system resilience [Sterbenz10,Höller15]. For cyber resiliency, Diversity avoids the risk of system homogeneity, in which the compromise of one component can propagate to all other similar components.…”

Section: D525 Plan and Manage Diversitymentioning

confidence: 99%

Developing cyber-resilient systems :

Ross¹,

Pillitteri²,

Graubart³

et al. 2021

View full text Add to dashboard Cite

This publication has been developed by NIST to further its statutory responsibilities under the Federal Information Security Modernization Act (FISMA), 44 U.S.C. § 3551 et seq., Public Law (P.L.) 113-283. NIST is responsible for developing information security standards and guidelines, including minimum requirements for federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of the appropriate federal officials exercising policy authority over such systems. This guideline is consistent with requirements of the Office of Management and Budget (OMB) Circular A-130.Nothing in this publication should be taken to contradict the standards and guidelines made mandatory and binding on federal agencies by the Secretary of Commerce under statutory authority. Nor should these guidelines be interpreted as altering or superseding the existing authorities of the Secretary of Commerce, OMB Director, or any other federal official. This publication may be used by nongovernmental organizations on a voluntary basis and is not subject to copyright in the United States. Attribution would, however, be appreciated by NIST.

show abstract

Section: D525 Plan and Manage Diversitymentioning

confidence: 99%

Developing cyber-resilient systems :

Ross¹,

Pillitteri²,

Graubart³

et al. 2021

View full text Add to dashboard Cite

show abstract

“…N self-checking (e. g., [33]) N-variant Systems (e. g., [34]) Reinitialization Reparameterization (e. g., [35])…”

Section: A Detectionmentioning

confidence: 99%

“…Höller et al [35] introduce an adaptive dynamic software diversity method. The diversification control receives error information from the decision mechanism and randomizes specific parameters during execution.…”

Section: Adaptive Software Diversitymentioning

confidence: 99%

REMIND: A Framework for the Resilient Design of Automotive Systems

Rosenstatter

Strandberg

Jolak

et al. 2020

2020 IEEE Secure Development (SecDev)

View full text Add to dashboard Cite

In the past years, great effort has been spent on enhancing the security and safety of vehicular systems. Current advances in information and communication technology have increased the complexity of these systems and lead to extended functionalities towards self-driving and more connectivity. Unfortunately, these advances open the door for diverse and newly emerging attacks that hamper the security and, thus, the safety of vehicular systems. In this paper, we contribute to supporting the design of resilient automotive systems. We review and analyze scientific literature on resilience techniques, fault tolerance, and dependability. As a result, we present the REMIND resilience framework providing techniques for attack detection, mitigation, recovery, and resilience endurance. Moreover, we provide guidelines on how the REMIND framework can be used against common security threats and attacks and further discuss the trade-offs when applying these guidelines.

show abstract

“…Höller et al [24] used ASLR as an effective technique for not only preventing malicious attacks but also for increasing the fault detection rate of memory-related software bugs. The authors propose an adaptive dynamic software diversity method that designs the program in such a way that during execution, it could be randomized based on the parameters that are adjusted at runtime.…”

Section: Related Workmentioning

confidence: 99%

Internal Interface Diversification as a Security Measure in Sensor Networks

Rauti¹,

Koivunen²,

Mäki³

et al. 2018

JSAN

View full text Add to dashboard Cite

More actuator and sensor devices are connected to the Internet of Things (IoT) every day, and the network keeps growing, while software security of the devices is often incomplete. Sensor networks and the IoT in general currently cover a large number of devices with an identical internal interface structure. By diversifying the internal interfaces, the interfaces on each node of the network are made unique, and it is possible to break the software monoculture of easily exploitable identical systems. This paper proposes internal interface diversification as a security measure for sensor networks. We conduct a study on diversifiable internal interfaces in 20 IoT operating systems. We also present two proof-of-concept implementations and perform experiments to gauge the feasibility in the IoT environment. Internal interface diversification has practical limitations, and not all IoT operating systems have that many diversifiable interfaces. However, because of low resource requirements, compatibility with other security measures and wide applicability to several interfaces, we believe internal interface diversification is a promising and effective approach for securing nodes in sensor networks.

show abstract

Towards Dynamic Software Diversity for Resilient Redundant Embedded Systems

Cited by 4 publications

References 22 publications

Developing cyber-resilient systems :

Developing cyber-resilient systems :

REMIND: A Framework for the Resilient Design of Automotive Systems

Internal Interface Diversification as a Security Measure in Sensor Networks

Contact Info

Product

Resources

About