Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Preventing Linux in your car from killing you: The L4Re Open Source Microvisor System. - SFO17-416

726 views

Published on

Session ID: SFO17-416
Session Name: Preventing Linux in your car from killing you: The L4Re Open Source Microvisor System. - SFO17-416
Speaker: Michael Hohmuth
Track: LITE


★ Session Summary ★
The uptake of Linux in modern cars is on the rise. It is very hard to make
Linux safe enough for safety assessors. Thus far the industry has used a
proprietary layer of safety certifiable system software that in addition to
running mission critical applications also allows running Linux safely in
virtual machines. Can that layer be open source as well ? Without compromising
on safety and security certifiability ? This session presents L4Re - an open
source project that ticks a lot of boxes in order to let Linux be what it's
good at while providing the safety that the Auto world demands.
---------------------------------------------------
★ Resources ★
Event Page: http://connect.linaro.org/resource/sfo17/sfo17-416/
Presentation:
Video:
---------------------------------------------------

★ Event Details ★
Linaro Connect San Francisco 2017 (SFO17)
25-29 September 2017
Hyatt Regency San Francisco Airport

---------------------------------------------------
Keyword:
'http://www.linaro.org'
'http://connect.linaro.org'
---------------------------------------------------
Follow us on Social Media
https://www.facebook.com/LinaroOrg
https://twitter.com/linaroorg
https://www.youtube.com/user/linaroorg?sub_confirmation=1
https://www.linkedin.com/company/1026961

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Preventing Linux in your car from killing you: The L4Re Open Source Microvisor System. - SFO17-416

  1. 1. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> / 5H 0LFURKSHUYLVRU DQG 2SHUDWLQJ 6VWHP 3UHYHQWLQJ /LQX[ LQ RXU FDU IURP NLOOLQJ RX 0LFKDHO +RKPXWK .HUQNRQ]HSW *PE+
  2. 2. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> ,Q WKLV WDON :K /LQX[ LV QRW VXIILFLHQW IRU FULWLFDO DSSOLFDWLRQV :K PLFURNHUQHOV DUH FRRO WKLV HDU :K / 5H LV HVSHFLDOO FRRO :KDW .HUQNRQ]HSW GRHV UHJDUGLQJ VHFXULW DQG VDIHW FHUWLILFDWLRQ +RZ FHUWLILFDWLRQ DQG RSHQ VRXUFH FDQ PL[
  3. 3. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 7KH SUREOHP 6RIWZDUH KDV EXJV &RPSOH[ VRIWZDUH KDV PDQ EXJV
  4. 4. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  5. 5. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  6. 6. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  7. 7. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  8. 8. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  9. 9. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> / 5H õ$SS90 7KH VROXWLRQ ,VRODWLRQ 6LPSOLFLW / 5H 0LFURNHUQHO FRPSOH[ DSS RSHUDWLQJ VVWHP OLQHV RI FRGH 0LOOLRQV RI OLQHV RI FRGH
  10. 10. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 0RQROLWKLF 26 3URFHVVHV 'ULYHUV )LOH 6VWHPV 1HWZRUN 6WDFNV 0HPRU 0DQDJHPHQW 0RQROLWKLF 2SHUDWLQJ 6VWHP 3ULYLOHJHG 0RGH $SSOLFDWLRQV$SSOLFDWLRQV$SSOLFDWLRQV 8VHU 0RGH +DUGZDUH
  11. 11. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 0LFURNHUQHO 26 'ULYHUV )LOH 6VWHPV 1HWZRUN 6WDFNV 0HPRU 0DQDJHPHQW 3ULYLOHJHG 0RGH $SSOLFDWLRQV$SSOLFDWLRQV$SSOLFDWLRQV 8VHU 0RGH 7DVNV 7KUHDGV ,3& +DUGZDUH
  12. 12. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 0LFURNHUQHO 26 6WURQJ LVRODWLRQ SURWHFWLRQ 0LQLPDO WUXVWHG FRPSXWLQJ EDVH 6PDOO FRPSRQHQWV ² HDV WR YDOLGDWH &XVWRPL]DELOLW $OO 26 VHUYLFHV DV XVHU OHYHO SURFHVVHV :HOO GHILQHG LQWHUIDFHV 0XOWL SHUVRQDOLW 26HV )OH[LELOLW ([WHQVLELOLW
  13. 13. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> / 0LFURNHUQHO )DPLO +LVWRU / Y [ [ Y 1 1 )LDVFR / [ / .D +D]HOQXW )LDVFR / Y / .D 3LVWDFKLR 1,&7$ 3LVWDFKLR HPEHGGHG 2./ / )LDVFR 2./ Y / )LDVFR 2&/ 6HF *0' ,%0 8QLY RI .DUOVUXKH 8QLY RI 1HZ 6RXWK :DOHV 1,&7$ 2SHQ .HUQHO /DEV &RJ 6VWHPV 78 'UHVGHQ .HUQNRQ]HSW VH/ $%, 6SHFLILFDWLRQ ,PSOHPHQWDWLRQ / 2& 1RYD 1RYD VH/ / 5H
  14. 14. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> / 5H 2ULJLQV DQG 5RDGPDS 78 'UHVGHQ VLQFH %HIRUH $FDGHPLF UHVHDUFK LQ YLUWXDOL]DWLRQ UHDO WLPH VHFXULW .HUQNRQ]HSW VLQFH 1RZ 6HFXULW ² FRQVXOWLQJ %6, DSSURYDOV FHUWLILFDWLRQ 1H[W $XWRPRWLYH FHUWLILFDWLRQ SURGXFW $IWHU ,QGXVWU VDIHW FHUWLILFDWLRQ SURGXFW
  15. 15. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> / 5H 2SHUDWLQJ 6VWHP DQG +SHUYLVRU $50 [ 0,36 ELW IXOO SDUD YLUWXDOL]DWLRQ GQDPLF VWDWLF VWURQJ LVRODWLRQ UHDO WLPH XQWUXVWHG 900 QDWLYH PLFURDSSV 326,; VXEVHW RSHQ VRXUFH PDWXUH
  16. 16. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 1RWHZRUWK / 5H IHDWXUHV ,VRODWLRQ &DSDELOLWLHV DV UHIHUHQFHV WR NHUQHO DQG XVHU ODQG REMHFWV 3URYLGHV LQIRUPDWLRQ KLGLQJ ORFDO QDPLQJ DQG DFFHVV FRQWURO (QDEOHV UHDVRQLQJ DERXW LVRODWLRQ DQG IUHHGRP IURP LQWHUIHUHQFH ‡ 1R FDSDELOLW WR VKDUHG REMHFW Æ QR ZD WR FRPPXQLFDWH LQWHUIHUH 'HVLJQHG WR HYHQ DOORZ SUHYHQWLQJ VKDULQJ QG FODVV NHUQHO REMHFWV DOORFDWRUV « DQG LQYLVLEOH DUFKLWHFWXUDO VWDWH 1RW WKHUH HW
  17. 17. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 1RWHZRUWK / 5H IHDWXUHV 5HDO WLPH 5HDO WLPH SHU &38 VFKHGXOHU )L[HG SULRULW URXQG URELQ 6XSSRUW IRU WKUHDG JURXS EXGJHW VFKHGXOLQJ SODQQHG :)4 QRQ 57 DOVR DYDLODEOH &URVV &38 WKUHDG 9&38 PLJUDWLRQ VXSSRUWHG 6KRUW FULWLFDO VHFWLRQV Z ,54V RII SUHHPSWLRQ SRLQWV )LQH JUDQXODU ZDLW IUHH ORFNLQJ ([FHOOHQW LQWHUUXSW UHVSRQVH WLPHV 1R FURVV &38 VKDUHG VWDWH LQ FULWLFDO SDWKV QR ELJ NHUQHO ORFN ([FHOOHQW VFDODELOLW
  18. 18. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 1RWHZRUWK / 5H IHDWXUHV 9LUWXDOL]DWLRQ +DUGZDUH DVVLVWHG YLUWXDOL]DWLRQ 8QWUXVWHG XVHU OHYHO YLUWXDO PDFKLQH PRQLWRUV 900V IRU SODWIRUP HPXODWLRQ ‡ XYPP 7LQ 900 IRU /LQX[ JXHVWV 8SVWUHDP $50 /LQX[ ´MXVW ZRUNVµ ‡ O NYP 8VHV 4HPX .90 LQ D /LQX[ JXHVW WR SURYLGH SODWIRUP IRU :LQGRZV JXHVWV [ RQO $OVR DYDLODEOH 3DUDYLUWXDOL]DWLRQ ZLWK / /LQX[ $ XVHU PRGH /LQX[ NHUQHO UXQQLQJ RQ / 5H
  19. 19. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 1RWHZRUWK / 5H IHDWXUHV 0LFURDSSV 0LFURDSSV 1DWLYH / 5H DSSOLFDWLRQV 6PDOO 7&% QR GHSHQGHQF RQ DQ ULFK 26 QR 'RP 1R GHSHQGHQF RQ 900 QR YLUWXDOL]DWLRQ RYHUKHDG 326,; VXEVHW IRU PLFURDSSV / 5H 5XQWLPH (QYLURQPHQW 6XSSRUWV OLEF & OLEUDU SWKUHDGV HWF 1DWXUDO H[WHQVLRQ RI NHUQHO $3, ZLWK XVHIXO 26 DEVWUDFWLRQV ‡ H J IRU DGGUHVV VSDFH PDQDJHPHQW
  20. 20. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 1RWHZRUWK / 5H IHDWXUHV , 2 YLUWXDOL]DWLRQ 'HYLFH SDVV WKURXJK WR 90V RU GULYHU PLFURDSSV '0$ VHFXULW YLD ,2008 $50 :,3 1DWLYH GULYHUV DQG PXOWLSOH[LQJ IRU YDULRXV EXVHV DQG GHYLFHV 3&, VHULDO FRQVROH $+&, IUDPHEXIIHU 9LUWXDO QHWZRUNLQJ DPRQJ 90V VXSSRUWHG 9LUWXDO (WKHUQHW VZLWFK RU S S FRQQHFWLRQ 9LUWXDO VRFNHW FRQQHFWLRQV 9LUWLR VXSSRUWHG
  21. 21. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 2SHQ 6RXUFH ² ZKHUH WR JHW / 5H *R WR ZZZ NHUQNRQ]HSW FRP GRZQORDG KWPO 2U ZZZ O UH RUJ 7RGD 6QDSVKRWV 691 6RRQ (DUO DFFHVV YLD *LW+XE
  22. 22. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> /LFHQVLQJ DQG GHYHORSPHQW PRGHO 0RVWO *3/ YHUVLRQ &RPPHUFLDO OLFHQVHV 'XDO OLFHQVLQJ FDSDELOLW 5HTXLUH &/$ IRU FRQWULEXWLRQV (VVHQWLDO IRU DWWUDFWLQJ LQYHVWPHQWV QHHGHG IRU FHUWLILFDWLRQ $OVR D FXVWRPHU UHTXLUHPHQW LQ $XWRPRWLYH .HUQNRQ]HSW VHUYHV DV PDLQWDLQHU JDWHNHHSHU IRU FRQWULEXWLRQV 5HTXLUHG IRU TXDOLW DQG LQWHJULW PDQDJHPHQW 3UHFRQGLWLRQ IRU FHUWLILFDWLRQ
  23. 23. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> / 5H XVH FDVHV WRGD
  24. 24. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  25. 25. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  26. 26. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  27. 27. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  28. 28. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  29. 29. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  30. 30. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 8VH FDVHV ² LQ GHYHORSPHQW
  31. 31. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3>
  32. 32. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> +LJK DVVXUDQFH VHFXULW 8SFRPLQJ &RPPRQ &ULWHULD ($/ FHUWLILFDWLRQ 1RW D SUHFRQGLWLRQ IRU %6, DSSOLFDWLRQ DSSURYDOV EXW VSHHGV WKLQJV XS )RU QHZ DSSOLFDWLRQV WKDW UHTXLUH D WUXVWHG SODWIRUP /LFHQVLQJ PRGHO &RGH VWLOO GHYHORSHG DV RSHQ VRXUFH %XW FHUWLILFDWLRQ GRFV VRPH WHVWV 4$ WRROV UHPDLQ SURSULHWDU 6SRQVRU JHWV H[FOXVLYH FRPPHUFLDO UHOLFHQVLQJ ULJKWV IRU JRY PDUNHW .HUQNRQ]HSW UHWDLQV FRPPHUFLDO H[SORLWDWLRQ ULJKWV IRU RWKHU PDUNHWV
  33. 33. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> $XWRPRWLYH 8SFRPLQJ ,62 $6,/ ' FHUWLILFDWLRQ DV D 6(RR& $6,/ LV D KDUG UHTXLUHPHQW IRU KLJK YROXPH PDUNHWV /LFHQVLQJ PRGHO &RGH VWLOO GHYHORSHG DV RSHQ VRXUFH %XW FHUWLILFDWLRQ GRFV VRPH WHVWV 4$ WRROV UHPDLQ SURSULHWDU 6SRQVRU JHWV H[FOXVLYH FRPPHUFLDO UHOLFHQVLQJ ULJKWV IRU DXWRPRWLYH PDUNHW .HUQNRQ]HSW UHWDLQV FRPPHUFLDO H[SORLWDWLRQ ULJKWV IRU RWKHU PDUNHWV
  34. 34. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> $XWRPRWLYH SDUWQHUVKLS 7LHU VRIWZDUH VXSSOLHU EX LQ 2(0V FDQ EX IURP WUXVWHG VRXUFH 7LHU SDUWQHU DVVXPHV PRVW ULVNV FRYHUV OLDELOLW LQGHPQLILFDWLRQ &ORVHG VRXUFH 2SHQ 6RXUFH EHQHILWV 6WDUW 5 ' QRZ IURP FRPPXQLW YHUVLRQ EX FHUWLILHG YHUVLRQ ODWHU
  35. 35. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> ,QGXVWULDO 6DIHW 3ODQQHG ,(& 6,/ FHUWLILFDWLRQ $ KDUG UHTXLUHPHQW IRU KSHUYLVRUV LQ LQGXVWULDO IXQFWLRQDO VDIHW /LFHQVLQJ PRGHO &RGH VWLOO GHYHORSHG DV RSHQ VRXUFH %XW FHUWLILFDWLRQ GRFV VRPH WHVWV 4$ WRROV UHPDLQ SURSULHWDU 6SRQVRUVKLS OLFHQVLQJ QRW ILQDOL]HG HW 1RZ VROLFLWLQJ UHTXLUHPHQWV DQG SDUWQHUV
  36. 36. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> &RPPXQLW RSSRUWXQLWLHV $50 SODWIRUP SRUWDELOLW %63V FORFN QHWZRUN DEVWUDFWLRQ ILUPZDUH LQWHUIDFH 8VDELOLW 'HYHORSHU H[SHULHQFH GRFXPHQWDWLRQ 6HFXULW KDUGHQLQJ )RUPDO PHWKRGV VWDWLF DQDOVLV (YHQ EHWWHU LVRODWLRQ IRU QHZ DWWDFNHU PRGHOV
  37. 37. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> %HIRUH , VXPPDUL]H « 7KDQN RX /LQDUR 7KDQN RX $50 7KDQN RX 5RELQ 5DQGKDZD
  38. 38. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 6XPPDU :K / 5H IRU IXQFWLRQDO VDIHW" 2SHQ 6RXUFH 0DWXUH KLJK TXDOLW LPSOHPHQWDWLRQ ULFK IHDWXUH VHW 1R OHJDF WUXVW GHSHQGHQFLHV WR /LQX[ &RYHUV VHFXULW DQ LPSRUWDQW DVSHFW RI VDIHW WKHVH GDV &RPPHUFLDO OLFHQVLQJ OLDELOLW FRYHUDJH DYDLODEOH .HUQNRQ]HSW FRYHUV 40 GHYHORSPHQW SURFHVV UHTXLUHPHQWV 8QLTXH EXVLQHVV PRGHO WKDW DWWUDFWV WKH LQYHVWPHQW QHHGHG IRU FHUWLILFDWLRQ
  39. 39. PJWSPTS_JUY HTR 2.( 7 4 0*7 3*1 2&) * .3 , *7 2&3> 7KDQN RX ZZZ NHUQNRQ]HSW FRP

×