A Low-Latency Optimization of a Rust-Based Secure Operating System for Embedded Devices

Area of Science:

• Computer Science
• Embedded Systems Engineering
• Cybersecurity

Background:

• Critical embedded systems require real-time responses, but current C-based operating systems suffer from memory safety vulnerabilities.
• Existing real-time operating systems (RTOS) often neglect security, posing risks in applications like drone and power grid control.
• Tock, a secure OS for embedded devices, is written in Rust but lacks essential low-latency real-time features.

Purpose of the Study:

• To augment the Tock operating system with low-latency real-time capabilities.
• To address the security and real-time performance gap in embedded operating systems.
• To enable Tock for critical applications demanding predictable, fast interrupt handling.

Main Methods:

• Leveraging extended Berkeley Packet Filter (eBPF) technology for efficient network traffic processing.
• Integrating eBPF's high-performance data path into the Tock operating system kernel.
• Modifying Tock's interrupt handling mechanisms to achieve microsecond-level latencies.

Main Results:

• Successfully added low-latency real-time functionality to the Tock operating system.
• Achieved interrupt handling latencies as low as 60 microseconds.
• Demonstrated a secure, low-latency operating system suitable for demanding embedded applications.

Conclusions:

• The integration of eBPF technology effectively enhances Tock's real-time performance.
• The developed system provides a secure and low-latency OS solution for embedded and microcontroller-based critical systems.
• This research bridges the gap between security and real-time performance in embedded operating systems.