A framework built on top of Zephyr RTOS that enables secure multitenancy on MCUs that leverages PMP-based hardware memory protection for tenant isolation, dynamically loadable applications via Zephyr’s LLEXT subsystem with mTLS-authenticated connection for post-deployment reconfigurability, and a condition-based publisher-subscriber model that minimises kernel-to-user crossings to preserve real-time behaviour.
SoTTEE introduces a bi-level isolation, combining a hardware-based Source of Trust (SoT) with flexible software sanctuaries for enhanced security in System-on-Chip (SoC) architectures which do not include ASIC-implemented cores and third-party security mechanisms.
Simon Baissat-Chavent, Lilian Bossuet, Cédric Killian· ACM Transactions on Reconfig...· 0 citations
This work focuses specifically on the ubiquitous x64 architecture through a hardware/software co-design that leverages x64 functionality that currently lays fallow that combines (a) instruction traps via lazy FPU abduction, and (b) simplified memory management by tiny value boxing.
Kevin Hayes, Peter A. Dinda· IEEE International Symposium...· 0 citations
Lattice is introduced, a novel RISC-V TEE framework that enables scalable enclaves on commercial RISC-V platforms with a minimal Trusted Computing Base (TCB) and proposes a non-intrusive Secure Monitor design for the underlying firmware.
Yu Zhao, Jia-Bei He, Ming-Ru Xu et al.· ACM Transactions on Architec...· 0 citations
This paper presents LithOS Bare-Metal (LithOS-BM), a Real-Time Operating System (RTOS) partially compliant with the ARINC 653 APEX standard, designed for small embedded systems where partitioning or virtualization is unnecessary or infeasible, and rapid response times are critical.Integrated Modular Avionics consolidat...
Miguel Gotor-Ramos, Carlos Cuesta-Martínez, Miguel Masmano-Tello et al.· Jornadas de Automática· 0 citations
Industrial edge platforms increasingly consolidate real-time control and general-purpose workloads on a single system-on-chip (SoC) to reduce costs, power, and complexity. Conventional real-time virtual machine (RTVM) setups, however, typically rely on PREEMPT_RT Linux and commonly reserve at least two CPU cores to iso...
Chwee-Lin Choong, Yoong Siang Song, Xin Yuan et al.· IEEE International Conferenc...· 0 citations
This work introduces WASP, a configurable framework that brings stateful serverless execution to the edge-cloud continuum by abandoning monolithic architectures in favor of strictly decoupled, pluggable components, and lets system administrators swap the WASM runtime and the datastore to fit available resources and app...
