RISC-V Needs More Secure “Wheels”! A Perspective for/from Automotive Industry

on YouTube ↗19m

" summary

Argues RISC-V needs richer isolation for zonal automotive ECUs, claiming WorldGuard’s current 32-ID limit (Xilinx 32-bit) won’t scale and realistic designs need 64–96 world IDs (examples: 16, 43, 82, up to 106 with heavy virtualization). Proposes a unified SPMP at init time (avoid dual-stage PMP waste), extends WorldGuard for more IDs and virtualization, and delivers artifacts: QEMU + CVA6 PoC with SPMP-for-hypervisor and WorldGuard extensions plus a Bao-based software stack; paper on arXiv.

AI-written summary · about

" chapters (8)

1. 0:00Automotive security standards
2. 1:14E/E architecture evolution
3. 4:43Logical isolation techniques
4. 6:54RISC-V isolation mechanisms
5. 8:20Estimating security IDs
6. 13:53Proposed ISA extensions
7. 16:38Proof of concept and evaluation
8. 17:52Future work and conclusion

" related talks

• 12mSecuring SiFive Vector Processors with an Open, Scalable Security ArchitectureDany Nativel · embedded world 2022
• 23mRISC V Enclaves A Clean Slate Approach To Linux SecurityCesare Garlati · RISC-V Summit 2019
• 20mNegative/Positive Verification for WorldGuard, CHERI and Other RISC-V Security Models-Aileen Honess · RISC-V Summit North America 2023
• 23mMind the gaps why we need new, truly open, multi domain heterogeneous solutionsTony King-Smith · IoTSF Conference 2015
• 52mEnabling New Security Frontiers: Deep-Dive Into Implementing Confidential Computing on RISC-VR... · Linux Security Summit Europe 2024
• 19mAn Open Source Approach to System SecurityHelena Handschuh · RISC-V Summit 2019
• 13mRISC-V: Securing the Future of Open Source ComputingAndrew Dellow · Spring 2022 RISC-V Week — RISC-V International Day
• 18mIntroducing RISC-V Confidential Computing for IoT DevicesBicheng Yang, Dingji Lee · RISC-V Summit 2022