Towards securing hard real-time networked embedded devices and systems : a cBPF implementation for an FPGA

Doran, Hans Dermot; Schneider, Sven; Leibundgut, Prosper; Neuhaus, Stephan; Eberli, Stefan

doi:10.1109/ETFA54631.2023.10275449

Please use this identifier to cite or link to this item: https://doi.org/10.21256/zhaw-28963

Publication type:	Conference paper
Type of review:	Peer review (publication)
Title:	Towards securing hard real-time networked embedded devices and systems : a cBPF implementation for an FPGA
Authors:	Doran, Hans Dermot Schneider, Sven Leibundgut, Prosper Neuhaus, Stephan Eberli, Stefan
et. al:	No
DOI:	10.1109/ETFA54631.2023.10275449 10.21256/zhaw-28963
Proceedings:	2023 IEEE 28th International Conference on Emerging Technologies and Factory Automation (ETFA)
Conference details:	28th International Conference on Emerging Technologies and Factory Automation (ETFA), Sinaia, Romania, 12-15 September 2023
Issue Date:	Oct-2023
Publisher / Ed. Institution:	IEEE
ISBN:	979-8-3503-3991-8
Language:	English
Subjects:	Real-time ethernet; Network security; Packet filtering; Berkeley packet filter; FPGA; PROFINET
Subject (DDC):	005: Computer programming, programs and data
Abstract:	In this body of work we describe preliminary work implementing a Berkely Packet Filter, in its original conception, in an FPGA. The purpose is packet filtering and ingress traffic shaping in security-relevant applications in distributed embedded nodes. We specifically target PROFINET nodes in hard real-time applications where network security is an open issue. We describe the motivation, implementation and verification including performance characteristics. We conclude that such a filter can be used to not only for protection against simple denial-of-service attacks but also for ingress protocol management and potentially for the implementation of system-wide security policies.
URI:	https://digitalcollection.zhaw.ch/handle/11475/28963
Fulltext version:	Accepted version
License (according to publishing contract):	Licence according to publishing contract
Departement:	School of Engineering
Organisational Unit:	Institute of Embedded Systems (InES)
Published as part of the ZHAW project:	High performance security in embedded networked components with hard real time deadlines
Appears in collections:	Publikationen School of Engineering

Files in This Item:

File	Description	Size	Format
2023_Doran-etal_Hard-real-time-networked-embedded-devices-and-systems_EFTA.pdf	Accepted Version	533.33 kB	Adobe PDF	View/Open

Show full item record

Doran, H. D., Schneider, S., Leibundgut, P., Neuhaus, S., & Eberli, S. (2023, October). Towards securing hard real-time networked embedded devices and systems : a cBPF implementation for an FPGA. 2023 IEEE 28th International Conference on Emerging Technologies and Factory Automation (ETFA). https://doi.org/10.1109/ETFA54631.2023.10275449

Doran, H.D. et al. (2023) ‘Towards securing hard real-time networked embedded devices and systems : a cBPF implementation for an FPGA’, in 2023 IEEE 28th International Conference on Emerging Technologies and Factory Automation (ETFA). IEEE. Available at: https://doi.org/10.1109/ETFA54631.2023.10275449.

H. D. Doran, S. Schneider, P. Leibundgut, S. Neuhaus, and S. Eberli, “Towards securing hard real-time networked embedded devices and systems : a cBPF implementation for an FPGA,” in 2023 IEEE 28th International Conference on Emerging Technologies and Factory Automation (ETFA), Oct. 2023. doi: 10.1109/ETFA54631.2023.10275449.

DORAN, Hans Dermot, Sven SCHNEIDER, Prosper LEIBUNDGUT, Stephan NEUHAUS und Stefan EBERLI, 2023. Towards securing hard real-time networked embedded devices and systems : a cBPF implementation for an FPGA. In: 2023 IEEE 28th International Conference on Emerging Technologies and Factory Automation (ETFA). Conference paper. IEEE. Oktober 2023. ISBN 979-8-3503-3991-8

Doran, Hans Dermot, Sven Schneider, Prosper Leibundgut, Stephan Neuhaus, and Stefan Eberli. 2023. “Towards Securing Hard Real-Time Networked Embedded Devices and Systems : A cBPF Implementation for an FPGA.” Conference paper. In 2023 IEEE 28th International Conference on Emerging Technologies and Factory Automation (ETFA). IEEE. https://doi.org/10.1109/ETFA54631.2023.10275449.

Doran, Hans Dermot, et al. “Towards Securing Hard Real-Time Networked Embedded Devices and Systems : A cBPF Implementation for an FPGA.” 2023 IEEE 28th International Conference on Emerging Technologies and Factory Automation (ETFA), IEEE, 2023, https://doi.org/10.1109/ETFA54631.2023.10275449.