RidgeRun Platform Security Manual/Introduction/General Overview: Difference between revisions

A system's security must be implemented both in software and hardware. This is especially relevant in embedded systems, as resources are limited, and some security features can affect the device's performance. To ensure that functionality is not affected by security measures, hardware-based features are often implemented.  

Hardware-level security refers to security features that are implemented in the device hardware instead of being implemented in the device through software. This helps to reduce the use of resources when the device is performing its normal operation tasks. These features are meant to prevent the physical manipulation of the device and avoid unauthorized access.  

Hardware-based security features often rely on cryptographic operations such as key checking to ensure that only authorized software can be executed on the device.  

With its task of managing communication, hardware, and software resources, the kernel is a critical component of system security. To mitigate the consequences of an attack, kernel-level security is mainly focused on resource isolation and privilege separation. By having boundaries, the kernel can protect a malicious party from taking over the whole system in the event of an attack and protect the memory from being read or written by processes that do not possess the correct authorization.

Another aspect of kernel-level security is integrity checking. The kernel's integrity needs to be verified by itself to ensure that modules, drivers, and configurations have not been modified without authorization. Techniques like digital signatures help ensure kernel integrity.

File system-level security refers to techniques used to ensure the integrity and protect the accessibility of data stored in an embedded platform's file system. Similarly to kernel-level security, privilege management and integrity verification are key aspects of filesystem-level security.

 

For examples of file system-level security measures you can look at '''[https://developer.ridgerun.com/wiki/index.php/RidgeRun_Platform_Security_Manual/Platform_Security#Disk%20Encryption Disk Encryption]''' and '''[https://developer.ridgerun.com/wiki/index.php/RidgeRun_Platform_Security_Manual/Platform_Security#Over-the-Air%20updates%20(OTA) OTA]'''.