How to Secure a RISC V System in 90 minutes From Single Core MCU to Mixed
summary
Hands-on pipeline shows an open Rocket-based SoC built from GitHub, an FPGA bitstream flashed to an X300 board with Vivado and OpenOCD, debugged with GDB/Eclipse, and running a multi‑zone nano‑kernel that isolates FreeRTOS, picoTCP and wolfSSL into separate executables. Policy is PMP entries loaded into the core at boot, the trusted base compiles to 1.6 KB trusted core, context switches take ~121 instructions, and a demo moves a robotic arm — the system boots, enforces faults, and works end-to-end.
AI-written summary · about
chapters (10)
- 0:00Start
- 11:33adapt the shell
- 32:15the lock bit
- 35:55connect an embedded device to the internet
- 39:31create separation inside the system
- 52:10bsp what is a bsp board
- 54:11map pieces of your hardware to each zone
- 1:04:28buffer overflows
- 1:18:20break the system in pieces
- 1:25:26the size limit for ipc messages
related talks
45mThe Future of Security is in Open Silicon
16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...
06mDemo: RISC-V Dual Lock-step Implementation for Safety and Security Applications
09mThe Future of Embedded Security with RISC-V
13mRISC-V: Securing the Future of Open Source Computing
13mUsing RISC V As a Security Processor For DARPA CHIPS And Commercial IoT
16mKeynote: NVIDIA’s secure RISC-V processor
21mRISC-V International Security Overview
