TrackOS: A Security Aware Real Time Operating System
We describe an approach to control flow integrity protection for real time systems. We present TrackOS, a security aware real time operating system. TrackOS checks a task's control stack against a statically generated call graph, generated by an abstract interpretation based tool that requires no source code. The monitoring is done from a dedicated task, the schedule of which is controlled by the real time operating system scheduler. Finally, we implement a version of software based attestation (SWATT) to ensure program data integrity to strengthen our control flow integrity checks. We demonstrate the feasibility of our approach by monitoring an open source autopilot in flight.
RV