Embedded solution for multiprocess application
summary
Proposes a hardware-assisted virtualization for low‑power devices: a pair of modules — process switch and lookup table — enforces per‑application memory permissions on every read/write by using a GPIO process signal and a memory‑map lookup whose cells are 4‑bit access flags starting from address A9 with four states (no, read, write, read/write). Applications carry a manifest with CPU and memory limits and requested hardware access; a lightweight broker uses rollover buffers for IPC. Claim: moving checks to hardware yields tiny virtualization overhead so constrained CPUs can run multiple isolated apps.
AI-written summary · about
chapters (9)
- 0:00Embedded multiprocess solutions
- 2:48Problem statement and demand
- 5:38Security and memory challenges
- 8:26Proposed hardware components
- 11:43Memory access via lookup table
- 13:56Process execution workflow
- 16:23Application manager role
- 19:55Administration and upgrades
- 20:17Conclusion and benefits
related talks
19mSupporting Trusted Virtual Machines with Hardware-based Secure Remote Memory
26mHypervisors and IoT (IoT Secret Storage)
48mBetrusted: Better Security Through Physical Partitioning
41mProtected Execution Facility
55mProtected Execution Facility On Power
18mGuest Memory Protection -- Current Status and Future
10mKeynote: Innovation Secured: A Paradigm Shift in the Processor Industry
56mPartitioning ARM Systems with the Jailhouse Hypervisor