Paper Title: Security for Code and Data Protection in Embedded Systems

Paper Abstract: Embedded systems have traditionally not used security for protection of either code or data stored within the embedded system. In hindsight, this design choice was dubious for embedded systems that did not have external communication connections. However, it is entirely unacceptable for modern, connected systems because of their sizable threat surfaces. Unfortunately, the notion of "security" covers a bewilderingly wide array of technology solutions which offer varying degrees of effectiveness. These technologies are commonly obscured by marketing and/or specification terminology. The challenge of selecting a proper security technology is further compounded by the application specific requirements for "porosity"; specifically the flow, or lack therefore, of code and data into and out of the embedded system, as well as the long service lifetimes that embedded systems are designed for. This presentation will present the technologies for code and data security in a bottom-up fashion. Specific focus will be given to the functional aspects of the security technologies and, where applicable, the application specific distinctions.

Paper Author: Grady Lambert, Engineering Director, Swissbit

Author Bio: Grady Lambert is the Director of Business Development at Swissbit, where he leads Flash memory business and product development activities. He has over twenty years of experience leading the development of FLASH memory products focused on embedded storage markets and applications. He holds a BSEE and a MSEE from the University of Alabama. His current on-going development efforts include SATA and PCIe products for Industrial, Automotive, Networking/Communications, and Security segments. He has authored numerous white papers on these topics for Swissbit and is a frequent presenter at industry events such as Flash Memory Summit.