Integrating Security Modeling in Embedded System Design Jan Werner, Matt Eby, Janos Mathe, Gabor Karsai, Yuan Xue, Janos Sztipanovits Institute for Software Integrated Systems Vanderbilt University

Goals Extend model-based design flows with security modeling aspects Develop analysis methods for security properties Perform architectural trade-offs using system/security metrics Autogenerate implementation from models

Integrated Co-design Environment Functional Models Component Models Componentized Model Access Control Secure Component Structure Model Partitioning Model Platform Model Deployment Model Generators Composition Platform OS Security Services HW/SW Arch Domain-specific Modeling Languages (AADL, Simulink/StateFlow, …) Security modeling for different platforms Model Analysis tools Code Generators

Testbed Configuration Controller Wireless Link Plant Simulator DAQ Different SW platforms: Linux + GRSecurity Others (LynxOS, VxWorks,..) xPC PCI-DDA08/12 Data acquisition board Single board computer SBC4495 from Micro/Sys

Experiment Code Generation And Deployment Reference Tank 1Tank 2 Tank 3 F2 F1 H1 H2H3 X1X2 On/Off Hi/Low Data flow Sensor Component Data Gateway Component Embedded system operating system I/O Partition 1Partition 2 Successful attack on component 1. Three tank control system model2. Code generation 3. Deployment environment4. Network attack on controller

Future work Modeling different security aspects: access control, security measures, confidentiality, data leakage, privacy, attack trees Integrating security aspects in different Domain specific modeling languages Creating toolchains for complex security analysis and system deployment