Binary protection framework for embedded systems

Abstract

Embedded systems empower many products and are used in a variety of applications ranging from smart homes to modern cars. Respective technologies enable new functional features and at the same time improve also non-functional aspects like environmental efficiency. Especially, their inter-connection and coupling with existing networks – in particular to the Internet – allow for an unprecedented boost. However, at the same time security concerns emerge since respective security breaches may have dire consequences ranging from malfunctions, theft, tampering of intellectual property up to threats of safety. This paper presents a generic protection framework for binary file images. The focus of the framework is on hindering reverse engineering and to ensure integrity of embedded systems software. It is designed to be applied in a post-development stage and can be used to add/improve security features of existing products in a number of ways. The concept, a proof-of-concept implementation as well as several key features, such as an in-memory library, a userland-exec implementation, and antidebugging & anti-tampering mechanisms are elaborated.