Research On Key Safety Protection Technology Based On VxWorks6.8 Operating System

As a product of the last century, the application of embedded system is more and more extensive in today's society. In the beginning of the design of embedded systems, people did not consider security issues as an independent dimension of embedded systems, and only focus on its functionality. However, with the continuous development of the network,the problem of information security and network security of embedded system is emerging gradually, exposed to the public, so the security problem of embedded system has become a priority factor when people design the embedded systems architecture.In this paper, VxWorks 6.8 embedded operating system is the research object, we put forward two kinds of security mechanisms for the operating system, one is based on the memory management unit and the other is based on security compilation options. For the memory management unit protection mechanism, we designed three protection schemes, including task stack guard zone, non-executable task stacks, text segment write-protection, which respectively realized the protection of the task stack for the buffer overrun and underrun, the protection of the task stack for the execution on the stack after malicious rewriting has occurred on the stack,the protection of the text segment to avoid being rewritten. For the security compiler option protection mechanism, we designed the FS (Fortify Source)security compiler option protection scheme, which realized the protection against buffers of 17 hazard functions.According to the researching and testing the protective technology above, we can verify that the VxWorks 6.8 embedded operating system can better use these protective technology to improve its reliability, at the same time these protective technology can also provide some guidance for the development of embedded security.The innovation of this paper is as follows: this paper is the first article to transplant FS security compiler options to VxWorks 6.8 embedded operating system, and verified that the FS security compilation option can better protect against buffer overflow for 17 hazard functions of the VxWorks 6.8 operating system.