Practical Embedded Security: Building Secure Resource-Constrained Systems

✍ Scribed by Timothy Stapko

• Publisher: Newnes
• Year: 2007
• Tongue: English
• Leaves: 299
• Series: Embedded Technology
• Category: Library

✦ Synopsis

The great strides made over the last decade in the complexity and network functionality of embedded systems have significantly enhanced their attractiveness for use in critical applications such as medical devices and military communications. However, this expansion into critical areas has presented embedded engineers with a serious new problem: their designs are now being targeted by the same malicious attackers whose predations have plagued traditional systems for years. Rising concerns about data security in embedded devices are leading engineers to pay more attention to security assurance in their designs than ever before. This is particularly challenging due to embedded devices' inherent resource constraints such as limited power and memory. Therefore, traditional security solutions must be customized to fit their profile, and entirely new security concepts must be explored. However, there are few resources available to help engineers understand how to implement security measures within the unique embedded context. This new book from embedded security expert Timothy Stapko is the first to provide engineers with a comprehensive guide to this pivotal topic. From a brief review of basic security concepts, through clear explanations of complex issues such as choosing the best cryptographic algorithms for embedded utilization, the reader is provided with all the information needed to successfully produce safe, secure embedded devices. .The ONLY book dedicated to a comprehensive coverage of embedded security! .Covers both hardware and software-based embedded security solutions for preventing and dealing with attacks .Application case studies support practical explanations of all key topics, including network protocols, wireless and cellular communications, languages (Java and C/++), compilers, web-based interfaces, cryptography, and an entire section on SSL

✦ Table of Contents

Front cover......Page 1
Practical Embedded Security......Page 4
Copyright page......Page 5
Table of contents......Page 6
Preface......Page 10
CHAPTER 1: Computer Security Introduction and Review......Page 20
What Can We Do?......Page 21
Access Control and the Origins of Computer Security Theory......Page 22
Security Policies......Page 23
Cryptography......Page 27
Data Integrity and Authentication......Page 32
Recommended Reading......Page 40
CHAPTER 2: Network Communications Protocols and Built-in Security......Page 42
Low-Level Communications......Page 43
Transport and Internet Layer Protocols......Page 51
Other Network Protocols......Page 57
Wrap-Up: Network Communications......Page 67
CHAPTER 3: Security Protocols and Algorithms......Page 68
Protocol Madness......Page 69
Standardizing Security—A Brief History......Page 70
Standardized Security in Practice......Page 72
Cryptography and Protocols......Page 79
Other Security Protocols......Page 81
SSL History......Page 86
Pesky PKI......Page 87
PKI Alternatives......Page 89
SSL Under the Hood......Page 91
The SSL Session......Page 98
SSL in Practice......Page 100
Wrap-Up......Page 101
CHAPTER 5: Embedded Security......Page 102
Networked Embedded Systems and Resource Constraints......Page 103
Embedded Security Design......Page 106
The KISS Principle......Page 110
Modularity Is Key......Page 114
Pick and Pull......Page 128
Justification......Page 132
Wrap-Up......Page 133
Wireless Technologies......Page 134
Bluetooth......Page 141
ZigBee......Page 142
Wireless Technologies and the Future......Page 145
Wrap-Up......Page 146
Introduction......Page 148
The World Wide Web......Page 149
Web-Based Interfaces......Page 150
Server-Side HTTP Web Interfaces......Page 153
HTTP Client Web Interfaces......Page 156
Console Applications......Page 157
File Transfer Protocol......Page 159
Email, DNS, DHCP, and SNMP......Page 164
Wrap-Up......Page 166
CHAPTER 8: Choosing and Optimizing Cryptographic Algorithms for Resource-Constrained Systems......Page 168
Do We Need Cryptography?......Page 169
Hashing—Low Security, High Performance......Page 171
To Optimize or Not to Optimize · · ·......Page 177
Choosing Cryptographic Algorithms......Page 184
Tailoring Security for Your Application......Page 189
Wrap-Up......Page 190
High Performance in Silicon......Page 192
Wrap-Up: Security and Hardware......Page 197
Programming Languages and Security......Page 198
Dealing with Attacks......Page 199
The Future of Security......Page 201
Wrap-Up......Page 203
Microchip PIC with Ethernet Controller......Page 206
PIC Example Application—Secure LED Blinking......Page 208
The History of Rabbit......Page 226
Software on the Rabbit......Page 227
Rabbit Case Study—Internet Enabled Vending Machine......Page 229
Putting It All Together......Page 238
Wrap-Up: A Secure Rabbit......Page 242
PIC Example Source Code (Main Program)......Page 244
Index......Page 298