Configurable middleware-level intrusion detection for embedded systems

Embedded systems have become integral parts of a diverse range of systems. Unfortunately, research on embedded system security, in general, and intrusion detection, in particular, has not kept pace. Embedded systems are, by nature, application specific and therefore frameworks for developing applica...

Full description

Saved in:
Bibliographic Details
Main Authors: Naess, E., Frincke, D.A., McKinnon, A.D., Bakken, D.E.
Format: Conference Proceeding
Language:English
Subjects:
Data security
Distributed computing
Embedded system
Intrusion detection
Laboratories
Microprocessors
Middleware
National security
Power system security
SCADA systems
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Embedded systems have become integral parts of a diverse range of systems. Unfortunately, research on embedded system security, in general, and intrusion detection, in particular, has not kept pace. Embedded systems are, by nature, application specific and therefore frameworks for developing application-specific intrusion detection systems for distributed embedded systems must be researched, designed, and implemented. In this paper, we present a configurable middleware-based intrusion detection framework. First, we present a system model and a concrete implementation of a highly configurable intrusion detection framework that is integrated into MicroQoSCORBA, a highly configurable middleware framework developed for embedded systems. Our framework autogenerates application-specific intrusion detection systems by exploiting application-specific information accessible to the middleware framework (e.g., object interfaces and method signatures). Next, a set of configurable intrusion detection mechanisms suitable for embedded systems is presented. A performance evaluation of these mechanisms is presented at the end of the paper.
ISSN:1545-0678
2332-5666
DOI:10.1109/ICDCSW.2005.52