SpecCert: Specifying and Verifying Hardware-based Security Enforcement - Inria - Institut national de recherche en sciences et technologies du numérique
Reports (Technical Report) Year : 2016

SpecCert: Specifying and Verifying Hardware-based Security Enforcement

Abstract

Over time, hardware designs have constantly grown in complexity and modern platforms involve multiple interconnected hardware components. During the last decade, several vulnerability disclosures have proven that trust in hardware can be misplaced. In this article, we give a formal definition of Hardware-based Security Enforcement (HSE) mechanisms, a class of security enforcement mechanisms such that a software component relies on the underlying hardware platform to enforce a security policy. We then model a subset of a x86-based hardware platform specifications and we prove the soundness of a realistic HSE mechanism within this model using Coq, a proof assistant system.
Fichier principal
Vignette du fichier
speccert-fm2016.pdf (515.62 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01356690 , version 1 (05-09-2016)

Identifiers

  • HAL Id : hal-01356690 , version 1

Cite

Thomas Letan, Pierre Chifflier, Guillaume Hiet, Pierre Néron, Benjamin Morin. SpecCert: Specifying and Verifying Hardware-based Security Enforcement. [Technical Report] CentraleSupélec; Agence Nationale de Sécurité des Systèmes d’Information. 2016, pp.20. ⟨hal-01356690⟩
520 View
562 Download

Share

More