Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restart single boxes by debug box #378

Open
Iceberg1988 opened this issue Nov 29, 2016 · 1 comment
Open

Restart single boxes by debug box #378

Iceberg1988 opened this issue Nov 29, 2016 · 1 comment
Labels

Comments

@Iceberg1988
Copy link

To avoid denial of service of a complete application by attacking one single box it is necessary to restart single boxes by the debug box.

For further explanation of the issue/feature here some quotes of the mbed forum:
Reinhard Schweiger:

I have a question about the reaction of uVisor after detecting a tried access to a restricted area or a missing ACL. Right now, during my first tests, I only saw a complete stopped OS on my target after an unallowed access. The reason for my question is that I want to build applications which at an unallowed access of a box only stopp this box while all other boxes keep running.
This reaction would be nessesary in an application which handles a sensor and an actuator in one box and a website in another box for visualizing the value of the sensor. If somebody injects code to the box of the website to overwrite the values of the sensor, the box with the website should be stopped and the box with the sensor and the actuator should keep running.
Is it possible to stop only the box with the unallowed access? Where can I configure this reaction?

Milosch Meriac:

Current uVisor reboots the device after catching a security problem. The solution for just rebooting a single box would be implemented using the planned debug box feature. The debug box would be able to catch a box faulting and resetting just that box.
Architecturally its better to move the logic for handling a box-specific reset into the application debug box, as it can notify depending boxes of the reset, as they would need to re-establish potential session.

This was discussed here: Change uVisor reaction at hitting missing ACL and unallowed access?

@ciarmcom
Copy link
Member

ARM Internal Ref: IOTSEC-212

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants