Practical Embedded Security: Building Secure Resource-Constrained Systems

版权声明：原创作品，允许转载，转载时请务必以超链接形式标明文章原始出版、作者信息和本声明。否则将追究法律责任。http://blog.csdn.net/topmvp - topmvp

The great strides made over the last decade in the complexity and network functionality of embedded systems have significantly enhanced their attractiveness for use in critical applications such as medical devices and military communications. However, this expansion into critical areas has presented embedded engineers with a serious new problem: their designs are now being targeted by the same malicious attackers whose predations have plagued traditional systems for years. Rising concerns about data security in embedded devices are leading engineers to pay more attention to security assurance in their designs than ever before. This is particularly challenging due to embedded devices inherent resource constraints such as limited power and memory. Therefore, traditional security solutions must be customized to fit their profile, and entirely new security concepts must be explored. However, there are few resources available to help engineers understand how to implement security measures within the unique embedded context. This new book from embedded security expert Timothy Stapko is the first to provide engineers with a comprehensive guide to this pivotal topic. From a brief review of basic security concepts, through clear explanations of complex issues such as choosing the best cryptographic algorithms for embedded utilization, the reader is provided with all the information needed to successfully produce safe, secure embedded devices.

Various techniques and tools are provided to the reader including:
*Designing embedded-specific security protocols
*Recognizing and dealing with attacks
*Common pitfalls when trying to optimize security
*A discussion of hardware alternatives
*C and other languages and their strengths and weaknesses
*A look at low-level networking protocols: TCP/IP, UDP, PPP, and Ethernet
*An entire chapter on Secure Socket Layers (SSL)
*Strategies for choosing algorithms and protocols for a particular platform
*Working with wireless networking protocols: Bluetooth, ZigBee, and 802.11
*Client/server applications detailed

http://rapidshare.com/files/71661255/0750682159.zip