Publication
RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective
| Summary: | The automotive industry is experiencing a massive paradigm shift. Cars are becoming increasingly autonomous, connected, and computerized. Modern electrical/electronic (E/E) architectures are pushing for an unforeseen functionality integration density, resulting in physically separate Electronic Control Units (ECUs) becoming virtualized and mapped to logical partitions within a single physical microcontroller (MCU). While functional safety (FuSa) has been pivotal for vehicle certification for decades, the increasing connectivity and advances have opened the door for a number of car hacks and attacks. This development drives (cyber-)security requirements in cars, and has paved the way for the release of the new security certification standard ISO21434. RISC-V has great potential to transform automotive computing systems, but we argue that current ISA/extensions are not ready yet. This paper provides our critical perspective on the existing RISC-V limitations, particularly on the upcoming WorldGuard technology, to address virtualized MCU requirements in line with foreseen automotive applications and ISO21434 directives. We then present our proposal for the required ISA extensions to address such limitations, mainly targeting initiator-side protection. Finally, we explain our roadmap towards a full open-source proof-of-concept (PoC), which includes extending QEMU, an open-source RISC-V core, and building a complete software stack. |
|---|---|
| Main Authors: | Pinto, Sandro |
| Other Authors: | Martins, José Carvalho; Rodríguez, Manuel; Cunha, Luís Carlos Costa; Schmalz, Georg; Moslehner, Uwe; Dieffenbach, Kai; Roecker, Thomas |
| Subject: | WorldGuard Virtualization Hypervisor Exten sion RISC-V Automotive Security Safety Real-time. |
| Year: | 2024 |
| Country: | Portugal |
| Document type: | preprint |
| Access type: | open access |
| Associated institution: | Universidade do Minho |
| Language: | English |
| Origin: | RepositóriUM - Universidade do Minho |
| _version_ | 1877775356071510016 |
|---|---|
| author | Pinto, Sandro |
| author2 | Martins, José Carvalho Rodríguez, Manuel Cunha, Luís Carlos Costa Schmalz, Georg Moslehner, Uwe Dieffenbach, Kai Roecker, Thomas |
| author2_role | author author author author author author author |
| author_facet | Pinto, Sandro Martins, José Carvalho Rodríguez, Manuel Cunha, Luís Carlos Costa Schmalz, Georg Moslehner, Uwe Dieffenbach, Kai Roecker, Thomas |
| author_role | author |
| contributor_name_str_mv | RepositóriUM - Universidade do Minho |
| country_str | PT |
| creators_json_txt | [{\"Person.name\":\"Pinto, Sandro\"},{\"Person.name\":\"Martins, José Carvalho\"},{\"Person.name\":\"Rodríguez, Manuel\"},{\"Person.name\":\"Cunha, Luís Carlos Costa\"},{\"Person.name\":\"Schmalz, Georg\"},{\"Person.name\":\"Moslehner, Uwe\"},{\"Person.name\":\"Dieffenbach, Kai\"},{\"Person.name\":\"Roecker, Thomas\"}] |
| datacite.contributors.contributor.contributorName.fl_str_mv | RepositóriUM - Universidade do Minho |
| datacite.creators.creator.creatorName.fl_str_mv | Pinto, Sandro Martins, José Carvalho Rodríguez, Manuel Cunha, Luís Carlos Costa Schmalz, Georg Moslehner, Uwe Dieffenbach, Kai Roecker, Thomas |
| datacite.date.Accepted.fl_str_mv | 2024-10-13T00:00:00Z |
| datacite.rights.fl_str_mv | http://purl.org/coar/access_right/c_abf2 |
| datacite.subjects.subject.fl_str_mv | WorldGuard Virtualization Hypervisor Exten sion RISC-V Automotive Security Safety Real-time. |
| datacite.titles.title.fl_str_mv | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective |
| dc.contributor.none.fl_str_mv | RepositóriUM - Universidade do Minho |
| dc.creator.none.fl_str_mv | Pinto, Sandro Martins, José Carvalho Rodríguez, Manuel Cunha, Luís Carlos Costa Schmalz, Georg Moslehner, Uwe Dieffenbach, Kai Roecker, Thomas |
| dc.date.Accepted.fl_str_mv | 2024-10-13T00:00:00Z |
| dc.format.none.fl_str_mv | application/pdf |
| dc.identifier.none.fl_str_mv | https://hdl.handle.net/1822/101189 |
| dc.language.none.fl_str_mv | eng |
| dc.rights.cclincense.fl_str_mv | http://creativecommons.org/licenses/by-sa/4.0/ |
| dc.rights.none.fl_str_mv | http://purl.org/coar/access_right/c_abf2 |
| dc.rights.rights.copyright.fl_str_mv | openAccess |
| dc.subject.none.fl_str_mv | WorldGuard Virtualization Hypervisor Exten sion RISC-V Automotive Security Safety Real-time. |
| dc.title.fl_str_mv | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective |
| dc.type.none.fl_str_mv | http://purl.org/coar/resource_type/c_816b |
| description | The automotive industry is experiencing a massive paradigm shift. Cars are becoming increasingly autonomous, connected, and computerized. Modern electrical/electronic (E/E) architectures are pushing for an unforeseen functionality integration density, resulting in physically separate Electronic Control Units (ECUs) becoming virtualized and mapped to logical partitions within a single physical microcontroller (MCU). While functional safety (FuSa) has been pivotal for vehicle certification for decades, the increasing connectivity and advances have opened the door for a number of car hacks and attacks. This development drives (cyber-)security requirements in cars, and has paved the way for the release of the new security certification standard ISO21434. RISC-V has great potential to transform automotive computing systems, but we argue that current ISA/extensions are not ready yet. This paper provides our critical perspective on the existing RISC-V limitations, particularly on the upcoming WorldGuard technology, to address virtualized MCU requirements in line with foreseen automotive applications and ISO21434 directives. We then present our proposal for the required ISA extensions to address such limitations, mainly targeting initiator-side protection. Finally, we explain our roadmap towards a full open-source proof-of-concept (PoC), which includes extending QEMU, an open-source RISC-V core, and building a complete software stack. |
| dirty | 0 |
| eu_rights_str_mv | openAccess |
| format | preprint |
| id | rum_f267810dfed6883065a6a2979ba835e0 |
| identifier.url.fl_str_mv | https://hdl.handle.net/1822/101189 |
| inst_facet_str | urn:organizationAcronym:repositorium{{{_:::_}}}Universidade do Minho |
| instacron_str | repositorium |
| institution | Universidade do Minho |
| instname_str | Universidade do Minho |
| language | eng |
| network_acronym_str | rum |
| network_name_str | RepositóriUM - Universidade do Minho |
| oai_identifier_str | oai:repositorium.uminho.pt:1822/101189 |
| organization_str_mv | urn:organizationAcronym:repositorium |
| person_str_mv | Pinto, Sandro Martins, José Carvalho Rodríguez, Manuel Cunha, Luís Carlos Costa Schmalz, Georg Moslehner, Uwe Dieffenbach, Kai Roecker, Thomas |
| publishDate | 2024 |
| repo_facet_str | urn:repositoryAcronym:rum{{{_:::_}}}RepositóriUM - Universidade do Minho |
| reponame_str | RepositóriUM - Universidade do Minho |
| repository_id_str | urn:repositoryAcronym:rum |
| service_str_mv | urn:repositoryAcronym:rum |
| spelling | engengThe automotive industry is experiencing a massive paradigm shift. Cars are becoming increasingly autonomous, connected, and computerized. Modern electrical/electronic (E/E) architectures are pushing for an unforeseen functionality integration density, resulting in physically separate Electronic Control Units (ECUs) becoming virtualized and mapped to logical partitions within a single physical microcontroller (MCU). While functional safety (FuSa) has been pivotal for vehicle certification for decades, the increasing connectivity and advances have opened the door for a number of car hacks and attacks. This development drives (cyber-)security requirements in cars, and has paved the way for the release of the new security certification standard ISO21434. RISC-V has great potential to transform automotive computing systems, but we argue that current ISA/extensions are not ready yet. This paper provides our critical perspective on the existing RISC-V limitations, particularly on the upcoming WorldGuard technology, to address virtualized MCU requirements in line with foreseen automotive applications and ISO21434 directives. We then present our proposal for the required ISA extensions to address such limitations, mainly targeting initiator-side protection. Finally, we explain our roadmap towards a full open-source proof-of-concept (PoC), which includes extending QEMU, an open-source RISC-V core, and building a complete software stack.application/pdfRISC-V Needs Secure 'Wheels': the MCU Initiator-Side PerspectivePinto, SandroMartins, José CarvalhoRodríguez, ManuelCunha, Luís Carlos CostaSchmalz, GeorgMoslehner, UweDieffenbach, KaiRoecker, ThomasHostingInstitutionOrganizationalRepositóriUM - Universidade do Minhoe-mailmailto:repositorium@usdb.uminho.ptrepositorium@usdb.uminho.ptURNIsPartOf2410.09839v1DOIIsPartOf10.48550/arXiv.2410.09839URLHasVersionhttps://arxiv.org/abs/2410.098392024-10-132024-10-13T00:00:00ZHandlehttps://hdl.handle.net/1822/101189http://purl.org/coar/access_right/c_abf2open accessWorldGuardVirtualizationHypervisor Exten sionRISC-VAutomotiveSecuritySafetyReal-time.578577 bytesother research producthttp://purl.org/coar/resource_type/c_816bpreprint2024-10-13http://creativecommons.org/licenses/by-sa/4.0/openAccesshttp://purl.org/coar/access_right/c_abf2application/pdfhttps://repositorium.uminho.pt/bitstreams/28a1df81-7b63-4382-bfb3-0c1879d68b08/download |
| spellingShingle | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective Pinto, Sandro WorldGuard Virtualization Hypervisor Exten sion RISC-V Automotive Security Safety Real-time. |
| status | SINGLETON |
| subject.fl_str_mv | WorldGuard Virtualization Hypervisor Exten sion RISC-V Automotive Security Safety Real-time. |
| title | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective |
| title_full | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective |
| title_fullStr | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective |
| title_full_unstemmed | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective |
| title_short | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective |
| title_sort | RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective |
| topic | WorldGuard Virtualization Hypervisor Exten sion RISC-V Automotive Security Safety Real-time. |
| topic_facet | WorldGuard Virtualization Hypervisor Exten sion RISC-V Automotive Security Safety Real-time. |
| url | https://hdl.handle.net/1822/101189 |
| visible | 1 |
Funded activities
No funded projects found.