一种增强嵌入式系统安全性的安全防护技术*

由于嵌入式应用环境的多样性,单纯软件或硬件安全技术或者安全产品的功能和性能都有其局限性,只能满足某类系统的特定安全需求。因此,如何有效利用软硬件技术特点,通过协同防护来保障系统的安全已成为当前信息安全领域的研究热点。通过对嵌入式系统安全威胁和隐患的分析,在此基础上提出一种可以提高嵌入式系统安全性的软硬协同安全防护技术。该技术通过硬件检测、软件处理、综合治理的方法,可以有效地增强嵌入式系统抗击本身缺陷和恶意攻击的能力。

A Kind of Security Protection Technology to Enhance theSecurity of Embedded System

Due to the variety of embedded system's application environment and the limitation of purely software and hardware security technology or product's function and performance, it just satisfied some special security's requirements of certain system. Therefore how to use the characteristics of software and hardware effectively and guarantee system's security via co-protection becomes more and more popular in information security domain. The article analyzes the threats and vulnerability of embedded system, and proposes a software-hardware co-protection security architecture technology, which can enhance embedded system's security. This technology uses the methods of hardware-detect, software-process and integrated-manage, to improve embedded system's ability of resisting threatens effectively, which are from malicious attack or because of system's vulnerability.