ESR12

Marine Kadar

  • Education:
    • Diplôme d’Ingénieur Ensimag (France) in 2017
      Specialized in Embedded Software
  • Research Interests:
    • Security solutions for safety critical systems
    • Real-Time operating systems
    • Hardware virtualization
Research project status:
Ongoing
PhD Student
marine.kadar@sysgo.com

Integration methods for host intrusion detection into embedded mixed-criticality systems

Host: SYSGO, Research and Technology.

  • Main supervisors:
    • Dr. Sergey Tverdyshev, sergey.tverdyshev@sysgo.com (2017-2020)
    • Philipp Gorski, philipp.gorski@sysgo.com (since 2020)
  • Co-supervisor:
    • Prof. Gerhard Fohler, fohler@eit.uni-kl.de

Objectives:

  1. Develop security monitoring solutions capable of detecting security attacks in industrial embedded mixed-criticality systems (MCS).
  2. Integrate the security solutions into the PikeOS hypervisor.

Results:

  • We defined a safety-aware architecture to integrate host intrusion detection system (HIDS) into an industrial embedded MCS. The approach is compatible with system certifiability towards industrial deployment.
  • We defined a set of metrics to evaluate the HIDS in regards to security, performance, and system schedulability impacts
  • We developed two monitoring approaches:
    • Transparent Control-Flow monitoring framework, using hardware assistance
    • Non-intrusive machine-learning based HIDS for embedded MCS
  • We implemented the proposed security monitoring services as extensions of SYSGO’s PikeOS real-time hypervisor and evaluated the overhead of the implemented solutions.

Collaboration with Prof. Gerhard Fohler:

  • TU Kaiserslautern: Evaluate the worst-case overhead of the anomaly detection solutions.

Publications:

  • M. Kadar, G. Fohler, D. Kuzhiyelil, and P. Gorski. Safety-aware integration of hardware-assisted program tracing in mixed-criticality systems for security monitoring. In IEEE Real-Time and Embedded Technology and Applications Symposium, 2021.
  • M. Kadar, S. Tverdyshev, and G. Fohler. Towards host intrusion detection for embedded industrial systems. In 50th Annual IEEE-IFIP International Conference on Dependable Systems and Networks-Supplemental Volume (DSN-S), 2020.
  • D. Kuzhiyelil, P. Zieris, M. Kadar, S. Tverdyshev, and G. Fohler. Towards transparent control-flow integrity in safety-critical systems. In 23rd Information Security Conference, 2020.
  • Patrick Denzler, Jan Ruh, Marine Kadar, Cosmin Avasalcai, Wolfgang Kastner. Towards Consolidating Industrial Use Cases on a Common Fog Computing Platform. In 25th IEEE International Conference on Emerging Technologies and Factory Automation (ETFA), 2020.
  • M. Kadar, S. Tverdyshev, and G. Fohler. System calls instrumentation for intrusion detection in embedded mixed-criticality systems. In 4th International Workshop on Security and Dependability of Critical Embedded Real-Time Systems, 2019.