SMASHUP: a toolchain for unified verification of hardware/software co-designs

Florian Lugou (1, 2, 3) , Ludovic Apvrille (3) , Aurélien Francillon (2)

1 LTCI - Laboratoire Traitement et Communication de l'Information
2 EURECOM
3 Télécom ParisTech

Critical and privacy-sensitive applications of smart and connected objects such as health-related objects are now common, thus raising the need to design these objects with strong security guarantees. Many recent works offer practical hardware-assisted security solutions that take advantage of a tight cooperation between hardware and software to provide system-level security guarantees. Formally and consistently proving the efficiency of these solutions raises challenges since software and hardware verifications approaches generally rely on different representations. The paper first sketches an ideal security verification solution naturally handling both hardware and software components. Next, it proposes an evaluation of formal verification methods that have already been proposed for mixed hardware/software systems, with regards to the ideal method. At last, the paper presents a conceptual approach to this ideal method relying on ProVerif, and applies this approach to a remote attestation system (SMART).

Domains: Computer Science [cs]; Embedded Systems; Computer Science [cs]; Software Engineering [cs.SE]; Computer Science [cs]; Computation and Language [cs.CL]; Computer Science [cs]; Programming Languages [cs.PL]; Computer Science [cs]; Logic in Computer Science [cs.LO]; Computer Science [cs]; Modeling and Simulation

Florian Lugou, Ludovic Apvrille, Aurélien Francillon. SMASHUP: a toolchain for unified verification of hardware/software co-designs. Journal of Cryptographic Engineering, 2016, pp.1-12. ⟨10.1007/s13389-016-0145-2⟩. ⟨hal-01403136v2⟩