摘要
为了增强So C的总线访问安全,阻止非法地址的访问行为,提出了基于AXI总线的分布式安全总线防火墙架构。针对不同的任务制定了多级可动态更新的安全策略,设计了具有较低延时的高速总线防火墙接口,增加了安全更新模块来保证策略配置与更新安全,结合系统的任务管理机制实现了面向多任务处理的任务隔离机制。实验结果表明,该防火墙的传输延时小、资源消耗少,可实现任务隔离。
In order to enhance the access security of the SoC bus, for stopping the illegal address access, this paper presents a distributed bus architecture with firewall security based on AXI bus. According to the different task, a multi-level security policy which can be dynamically updated is developed, the bus firewall interface with high-speed and low latency is designed and in- creased with a security update module to ensure policy configuration and update security, combine with task management system it achieves the task oriented isolation mechanism of multi-tasking. The experimental results show that the transmission delay of the firewall is small, low resource consumption, can achieve the task of isolation.
作者
刘志强
徐金甫
戴强
李军伟
Liu Zhiqiang Xu Jinfu Dai Qiang Li Junwei(The PLA Information Engineering University, Zhengzhou 450001, China)
出处
《电子技术应用》
北大核心
2017年第11期27-30,共4页
Application of Electronic Technique
关键词
总线安全
防火墙
安全更新
任务隔离
bus security
firewall
security update
task isolation