嵌入式系统中的安全金字塔  

Security pyramid in embedded system

作　　者：徐蓉[1] 

机构地区：[1]四川师范大学基础教学学院,成都610041

出　　处：《计算机应用》2013年第A02期142-144,205,共4页journal of Computer Applications

摘　　要：嵌入式系统的安全设计与传统安全设计的不同之处,在于其受限制的系统功能(包括防御能力)和易被攻击者访问到的物理层。嵌入式安全问题不可能在单一的安全抽象层被解决,而是一个跨越多个抽象层的系统问题。使用一个嵌入式生物认证设备来演示一个跨越所有安全层(包括协议层、算法层、架构层、微架构层和电路层)的金字塔,以保证嵌入式系统的健壮性和安全性。The design of security for embedded systems differs from traditional security design because these systems are resource-constrained in their capacities （and consequently in their defenses） and easily accessible to adversaries at the physical layer. Embedded security cannot be solved at a single security abstraction layer, but rather is a system problem spanning multiple abstraction levels. An embedded biometric authentication device was used to demonstrate the necessity of addressing all levels of the security pyramid （ including protocol, algorithm, architecture, micro-architecture and curcuit） to ensure a fully robust and secure embedded system.

关 键 词：嵌入式系统 安全金字塔 协议层 算法层 架构层 微架构层 电路层 

分 类 号：TP311.52[自动化与计算机技术—计算机软件与理论]