Identification and verification of security relevant functions in embedded systems based on source code annotations and assertions

Abstract

Most modern embedded systems include an operating system. Not all functions in the operating systems have to fulfill the same security requirements. In this work we1 propose a mechanism to identify and maintain functions that have to meet strict security needs. This mechanism is based on annotations representing security constrains and assertions to check these security annotations during the verification phase of the system under development. © IFIP International Federation for Information Processing 2010.