Embedded systems security: Practical methods for safe and secure software and systems development

Embedded Systems Security: Practical Methods for Safe and Secure Software and Systems Development

Volumn , Issue , 2012, Pages 1-396

  Kleidermacher, David ^a   Kleidermacher, Mike ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85013844894     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1016/C2010-0-67275-0     Document Type: Book

References (201)

1. Boyd C., Mathuria A. Protocols for Authentication and Key Establishment 2003, Springer-Verlag, Heidelberg.
2. Multicast Extensions to the Security Architecture for the Internet Protocol. Internet Engineering Task Force, Request for Comments: 5374; November 2008.
3. Multicast Security (MSEC) Group Key Management Architecture. Internet Engineering Task Force, Request for Comments: 4046; April 2005.
4. IEEE Standard 802.1x-2001 IEEE Standard for Local and Metropolitan Area Networks-Port-Based Network Access Control June 2001, IEEE Computer Security.
5. Extensible Authentication Protocol (EAP) June 2004, Internet Engineering Task Force, Request for Comments: 3748.
6. Extensible Authentication Protocol (EAP) Key Management Framework March 2005, Internet Engineering Task Force, Request for Comments: 4017.
7. Extensible Authentication Protocol (EAP) Method Requirements for Wireless LANs August 2008, Internet Engineering Task Force, Request for Comments: 5247.
8. Geier J. Implementing 802.1x Security Solutions for Wired and Wireless Networks 2008, Wiley, New York.
9. IEEE Standard 802.11i Supplement to Standard for Telecommunications Information Exchange Between Systems-LAN/MAN Specific Requirements-Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specification for Enhanced Security July 2004.
10. The State of Wi-Fi Security Wi-Fi Certified WPA2 Delivers Advanced Security to Homes, Enterprises and Mobile Devices September 2009, Wi-Fi Alliance.
11. IEEE Standard 802.1AE-2006 IEEE Standard for Local and Metropolitan Area Networks-Media Access Control (MAC) Security August 2006, IEEE Computer Security.
12. Lawson S. Facebook Sees Need for Terabit Ethernet. Computerworld February 3, 2010.
13. Security Architecture for the Internet Protocol December 2005, Internet Engineering Task Force, Request for Comments: 4301.
14. IP Authentication Header December 2005, Internet Engineering Task Force, Request for Comments: 4302.
15. IP Encapsulating Security Payload (ESP) December 2005, Internet Engineering Task Force, Request for Comments: 4303.
16. NIST Special Publication 800-57 Recommendation for Key Management-Part 1: General (Revised) March 2007.
17. The Internet Key Exchange November 1998, Internet Engineering Task Force, Request for Comments: 2409.
18. Internet Key Exchange (IKEv2) Protocol December 2005, Internet Engineering Task Force, Request for Comments: 4306.
19. Internet Key Exchange Protocol Version 2 (IKEv2) September 2010, Internet Engineering Task Force, Request for Comments: 5996.
20. Transmission of IPv6 Packets over IEEE 802.15.4 Networks September 2007, Internet Engineering Task Force, Request for Comments: 4944.
21. ISA-100.11a Wireless Systems for Industrial Automation: Process Control and Related Applications 2009, The International Society for Automation.
22. Zigbee Smart Energy 2.0 Technical Requirements Document, draft version 0.7 2011, Zigbee Alliance.
23. Shelby Z., Bormann C. 6LoWPAN, The Wireless Embedded Internet 2009, Wiley, New York.
24. The TLS Protocol Version 1.0 January 1999, Internet Engineering Task Force, Request for Comments: 2246.
25. The Transport Layer Security (TLS) Protocol Version 1.1 April 2006, Internet Engineering Task Force, Request for Comments: 4346.
26. The Transport Layer Security (TLS) Protocol Version 1.2 August 2008, Internet Engineering Task Force, Request for Comments: 5246.
27. Snader J.C. VPNs Illustrated: Tunnels, VPNs, and IPsec November 2005, Addison-Wesley Professional.
28. Bantoft K., Wouters P. Openswan: Building and Integrating Virtual Private Networks: Learn from the Developers of Openswan How to Build Industry Standard, Military Grade VPNs and Connect Them with Windows, MacOSX, and Other VPN Vendors February 2006, Packt Publishing, Birmingham, UK.
29. Datagram Transport Layer Security April 2006, Internet Engineering Task Force, Request for Comments: 4347.
30. SSH CBC Vulnerability, US-CERT Vulnerability Note VU#958563.
31. SSH CRC32 Attack Detection Code Contains Remote Integer Overflow, US-CERT Vulnerability Note VU#945216.
32. The Secure Shell (SSH) Protocol Assigned Numbers January 2006, Internet Engineering Task Force, Request for Comments: 4250.
33. The Secure Shell (SSH) Protocol Architecture January 2006, Internet Engineering Task Force, Request for Comments: 4251.
34. The Secure Shell (SSH) Authentication Protocol January 2006, Internet Engineering Task Force, Request for Comments: 4252.
35. The Secure Shell (SSH) Transport Layer Protocol January 2006, Internet Engineering Task Force, Request for Comments: 4253.
36. The Secure Shell (SSH) Connection Protocol January 2006, Internet Engineering Task Force, Request for Comments: 4253.
37. SSH File Transfer Protocol. Internet-Draft from the Secure Shell Working Group.
38. National Institute of Standards and Technology National Vulnerability Database http://web.nvd.nist.gov/view/vuln/detailvulnId=CVE-2010-4180.
39. National Institute of Standards and Technology National Vulnerability Database http://web.nvd.nist.gov/view/vuln/detailvulnId=CVE-2009-3555.
40. Transport Layer Security (TLS) Renegotiation Indication Extension February 2010, Internet Engineering Task Force, Request for Comments: 5746.
41. Recommendation ITU-T H.323 Packet-Based Multimedia Communications Systems December 2009, Telecommunications Standardization Section of ITU.
42. Papageorgiou P. A Comparison of H.323 vs. SIP June 4, 2001.
43. SIP: Session Initiation Protocol June 2002, Internet Engineering Task Force, Request for Comments: 2543.
44. Security Mechanism Agreement for the Session Initiation Protocol (SIP) January 2003, Internet Engineering Task Force, Request for Comments: 3329.
45. Schulzrinne H. Issues in Designing a Transport Protocol for Audio and Video Conferences and Other Multiparticipant Real-Time Applications October 1993, expired Internet Draft.
46. RTP: A Transport Protocol for Real-Time Applications July 2003, Internet Engineering Task Force, Request for Comments: 3550.
47. RTP Profile for Audio and Video Conferences with Minimal Control July 2003, Internet Engineering Task Force, Request for Comments: 3551.
48. The Secure Real-Time Transport Protocol (SRTP) March 2004, Internet Engineering Task Force, Request for Comments: 3711.
49. MIKEY: Multimedia Internet KEYing, Internet Engineering Task Force August 2004, Request for Comments: 3830.
50. ZRTP: Media Path Key Agreement for Unicast Secure RTP April 2011, Internet Engineering Task Force, Request for Comments: 6189.
51. Orrblad J. Alternatives to MIKEY/SRTP to Secure VoIP March 2005, ftp://ftp.it.kth.se/Reports/DEGREE-PROJECTREPORTS/050330-Joachim-Orrblad.pdf.
52. Requirements and Analysis of Media Key Management Protocols April 2009, Internet Engineering Task Force, Request for Comments: 5479.
53. Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP) May 2010, Internet Engineering Task Force, Request for Comments: 5764.
54. Suite B Profile for Datagram Transport Layer Security/Secure Real-Time Transport Protocol (DTLS-SRTP) April 8, 2011, Internet Engineering Task Force, Draft RFC.
55. Wool A. Key Management for Encrypted Broadcast. ACM Transactions on Information and System Security (TISSEC) May 2000, 3(2).
56. Keteyian A. Digital Photocopiers Loaded With Secrets. April 20, 2010. http://www.cbsnews.com/stories/2010/04/19/eveningnews/main6412439.shtmltag=currentVideoInfo;videoMetaInfo;.
57. Fruhwirth C. New Methods in Hard Disk Encryption; Institute for Computer Languages Theory and Logic Group. Vienna University of Technology July 18, 2005.
58. Liskov M., Rivest R., Wagner D. Tweakable Block Ciphers 2002, Santa Barbara, CA, LNCS, Crypto.
59. Security in Storage Working Group of the IEEE Computer Society Committee.IEEE P1619 Standard for Cryptographic Protection of Data on Block-Oriented Storage Devices 2007.
60. NIST Special Publication 800-38E Recommendation for Block Cipher Modes of Operation: The XTS-AES Mode for Confidentiality on Storage Devices January 2010.
61. Rogaway P. Efficient Instantiations of Tweakable Blockciphers and Refinements to Modes OCB and PMAC September 24, 2004, http://www.cs.ucdavis.edu/~rogaway/papers/offsets.pdf.
62. RSA Laboratories PKCS #5 v2.0: Password-Based Cryptography Standard March 25, 1999.
63. PKCS #5: Password-Based Cryptography Specification Version 2.0 September 2000, Internet Engineering Task Force, Request for Comments: 2898.
64. National Institute of Standards and Technology National Vulnerability Database http://web.nvd.nist.gov/view/vuln/detailvulnId=CVE-2010-3741.
65. Turpe S., et al. Attacking the BitLocker Boot Process 2009, Proceedings of the 2nd International Conference on Trusted Computing, TRUST, Oxford, UK, April 6-8, 2009; LNCS 5471, Springer, 2009. DOI: 10.1007/978-3-642-00587-9_12.
66. Halderman A.J., Schoen S.D., Heninger N., Clarkson W., Paul W., Candrino J.A., Feldman A.J., Appelbaum J., Felten E.W. Lest We Remember: Cold Boot Attacks on Encryption Keys August 2008, Proceedings of the 17th USENIX Security Symposium, 45-60.
67. What is Endpoint Security? http://www.endpointsecurity.org/Documents/What_is_endpointsecurity.pdf.
68. Epstein K., Elgin B. Network Security Breaches Plague NASA November 20, 2008, http://www.businessweek.com/print/magazine/content/08_48/b4110072404167.htm.
69. Bohn K., Todd B. Obama, McCain Campaigns' Computers Hacked for Policy Data November 6, 2008, http://www.cnn.com/2008/TECH/11/06/campaign.computers.hacked.
70. Greenemeier L. The TJX Effect August 11, 2007, http://www.informationweek.com/news/security/cybercrime/showArticle.jhtml%3FarticleID%3D201400171.
71. Zetter K. Miley Cyrus Hacker Raided by FBI October 20, 2008, http://blog.wired.com/27bstroke6/2008/10/miley-cyrus-hac.html.
72. Kirk J. 'Evil Twin' Wi-Fi Access Points Proliferate April 25, 2007, http://www.networkworld.com/news/2007/042507-infosec-evil-twin-wi-fi-access.html.
73. Sotirov A., et al. MD5 Considered Harmful Today December 30, 2008, http://www.win.tue.nl/hashclash/rogue-ca.
74. McMillan R. CheckFree Warns 5 Million Customers After Hack January 7, 2009, http://csoonline.com/article/474365/CheckFree_Warns_Million_Customers_After_Hack.
75. Krebs B. Citibank Phish Spoofs 2-Factor Authentication July 10, 2006, http://blog.washingtonpost.com/securityfix/2006/07/citibank_phish_spoofs_2factor_1.html.
76. Kristensen T. Symantec Beats the Competition... October 13, 2008, http://secunia.com/blog/29.
77. Skoudis Ed, Carpenter M. Seven Desktop Security Suites Reviewed. Information Security Magazine November 2007, http://searchsecurity.techtarget.com/magazineContent/Product-review-Seven-integrated-endpoint-security-products.
78. National Vulnerability Database, search on vendors Symantec. http://web.nvd.nist.gov/view/vuln/search%3Fexecution%3De2s1.
79. McAfee Antivirus Vulnerability Published March 18, 2005, http://news.zdnet.co.uk/security/0,1000000189,39191831,00.htm.
80. http://www.ironkey.com/.
81. Claburn T. Another Google Chrome Security Flaw Identified September 5, 2008, http://www.informationweek.com/news/internet/google/showArticle.jhtml%3FarticleID%3D210500290.
82. King S.T., et al. Secure Web Browsing with the OP Web Browser 2008, http://www.cs.uiuc.edu/homes/kingst/Research_files/grier08.pdf.
83. National Vulnerability Database, search for VMware and/or Xen. http://web.nvd.nist.gov/view/vuln/search%3Fexecution%3De2s1.
84. Schneier B. Two-Factor Authentication: Too Little, Too Late April 2005, http://www.schneier.com/essay-083.html.
85. Weigold T., et al. The Zurich Trusted Information Channel-An Efficient Defence against Man-in-the-Middle and Malicious Software Attacks; TRUST 2008, LNCS 4968 2008, 75-91.
86. Shachtman N. Under Worm Assault, Military Bans Disks, USB Drives November 19, 2008, http://blog.wired.com/defense/2008/11/army-bans-usb-d.html.
87. Security and Permissions in Android http://code.google.com/android/devel/security.html.
88. Shankland S. Google Details 'Reboot' Bug, Android Security Fixes November 11, 2008, http://news.cnet.com/8301-1009_3-10093573-83.html.
89. Burnette Ed Worst. Bug. Ever November 7, 2008, http://blogs.zdnet.com/Burnette/%3Fp%3D680.
90. Oberheide J., Lanier Z. TEAM JOCH vs. Android January 28-30, 2011, Presentation made at ShmooCon 2011 Conference, Washington, DC. http://n0where.org/talks/shmoo11-teamjoch_v4.pdf.
91. McConnell S. Code Complete 2004, Redmond, WA; Microsoft Press. 2nd ed.
92. Kroah-Hartman G., Corbet J., McPherson A. Linux Kernel Development: How Fast It Is Going, Who Is Doing It, What They Are Doing, and Who Is Sponsoring It: An August 2009 Update 2009, Linux Foundation.
93. General Dynamics website:. http://www.gdc4s.com/content/detail.cfm%3Fitem%3D570bc11a-1d6d-4acf-a68e-c256a615808d%26page%3D2.
94. NSA SELinux Frequently Asked Questions: . http://www.nsa.gov/research/selinux/faqs.shtml.
95. http://web.nvd.nist.gov/view/vuln/search.
96. http://kerneltrap.org/mailarchive/linux-kernel/2008/2/2/700024.
97. Corbet J. An Interview with Jim Ready (June 11, 2008), LWN.net.
98. Koscher K., Czeskis A., Roesner F., Patel S., Kohno T. Experimental Security Analysis of a Modern Automobile May 19, 2010, 2010 IEEE Symposium on Security and Privacy, Oakland, CA.
99. Halperin D., Heydt-Benjamin T.S., Ransford B., Clark S.S. Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses March 12, 2008, 2008 IEEE Symposium on Security and Privacy, Oakland, CA.
100. Andersen J.P. Computer Security Planning Study 1972, http://csrc.nist.gov/publications/history/ande72.pdf.
101. Liedtke J. Toward Real Microkernels. Communications of the ACM September 1996, 39(9):70-77.
102. Appendix A, Open Sources: Voices from the Open Source Revolution 1999, O'Reilly, Sebastopol, CA. C. DiBona, S. Stone, M. Ockman (Eds.).
103. Microsoft Security Advisory (2639658) Vulnerability in TrueType Font Parsing Could Allow Elevation of Privilege November 3, 2011, http://technet.microsoft.com/en-us/security/advisory/2639658.
104. US-CERT/NIST National Vulnerability Database Vulnerability Summary for CVE-2011-3402 http://web.nvd.nist.gov/view/vuln/detail%3FvulnId%3DCVE-2011-3402.
105. Carlsson M. Worst Case Execution Time Analysis, Case Study on Interrupt Latency, for the OSE Real-Time Operating System http://www.astec.uu.se/publications/2002/Carlsson-WCET_Exjobb.pdf.
106. Jaeger T., Sailer R., Zhang X. Analyzing Integrity Protection in the SELinux Example Policy August 4-8, 2003, Proceedings of the 12th USENIX Security Symposium, Washington, DC.
107. Hardy N. The Confused Deputy. ACM SIGOPS Operating Systems Review October 1988, 22(4).
108. Whitaker A., et al. Denali: Lightweight Virtual Machines for Distributed and Networked Applications June 10-15, 2002, USENIX Annual Technical Conference, Boston, MA.
109. King S., Peter C., Yi-Min W., Chad V., Helen J.W., Jacob R.L. SubVirt: Implementing Malware with Virtual Machines May 21-24, 2006, IEEE Symposium on Security and Privacy, Berkeley, CA.
110. Ormandy T. An Empirical Study into the Security Exposure to Hosts of Hostile Virtualized Environments 2006, http://taviso.decsystem.org/virtsec.pdf.
111. Rutkowska J., Tereshkin A., Wojtczuk R. Detecting and Preventing the Xen Hypervisor Subversions," "Bluepilling the Xen Hypervisor," "Subverting the Xen Hypervisor August 7, 2008, Black Hat USA, Las Vegas, NV.
112. CVE-2008-2100 National Vulnerability Database http://web.nvd.nist.gov/view/vuln/detail%3FvulnId%3DCVE-2008-2100.
113. Mijat R., Nightingale A. Virtualization Is Coming to a Platform Near You 2010, White Paper, ARM Ltd.
114. Dowd M. Application-Specific Attacks: Leveraging the ActionScript Virtual Machine April 2008, http://documents.iss.net/whitepapers/IBM_X-Force:WP_final.pdf.
115. Maxtor Basics Personal Storage 3200 (PS 3200) virus [205131] Seagate Knowledge Base, online URL http://seagate.custkb.com/seagate/crm/selfservice/search.jsp%3FDocId%3D205131.
116. Adee S. The Hunt for the Kill Switch. IEEE Spectrum Magazine May 2008, http://spectrum.ieee.org/semiconductors/design/the-hunt-for-the-kill-switch/.
117. Rutkowska J. Subverting Vista Kernel for Fun and Profit August 3, 2006, Black Hat Briefings, Las Vegas, NV.
118. Intel Trusted Execution Technology (Intel TXT) Software Development Guide/Measured Launched Environment Developer's Guide March 2011.
119. Wojtczuk R., Rutkowska J. Attacking Intel Trusted Execution Technology February 18-19, 2009, Black Hat DC, Washington, DC.
120. Trusted Computing Group (TCP) Trusted Platform Module (TPM) Main Specification Level 2, Version 1.2, Revision 116 (in three parts, "Design Principles," "Structures of the TPM," "Commands") March 1, 2011.
121. Trusted Computing Group (TCG) Trusted Network Connection (TNC) Architecture for Interoperability, Specification Version 1.4, Revision 4, May 18, 2009.
122. Sharon G. Security Expert: U.S. Companies Unprepared for Cyber Terror eSecurity Planet; July 19, 2002; online URL:. http://www.esecurityplanet.com/trends/article.php/1429851/Security-Expert-US-Companies-Unprepared-For-Cyber-Terror.htm.
123. ILTIS-Railway Traffic Control. Siemens Switzerland Transportation Systems http://www.aonix.com/pdf/CaseStudy_ILTIS.pdf.
124. http://en.wikipedia.org/wiki/Comparison_of_programming_languages.
125. DO-178B Software Considerations in Airborne Systems and Equipment Certification 1992, RTCA, Inc.
126. Guidelines for the Use of the C Language in Critical Systems October 2004, MISRA-C:2004, The Motor Industry Software Reliability Association.
127. Working with Import Libraries and Export Files Microsoft Development Network. http://msdn.microsoft.com/library/default.aspurl=/library/en-us/vccore/html/_core_working_with_import_libraries_and_export_files.asp.
128. Guidelines for the Use of the C++ Language in Critical Systems June 2008, MISRA C++:2008, The Motor Industry Software Reliability Association.
129. The Embedded C++ Specification, Version WP-AM-003 October 1999, The Embedded C++ Technical Committee.
130. Haden M. Embedded C++ Slashes Code Size and Boosts Execution 1998, http://www.ghs-rtos.com/wp/ec++article2.html.
131. Watson A.H., McCabe T.J. NIST Special Publication 500-235: Structured Testing: A Testing Methodology Using the Cyclomatic Complexity Metric September 1996.
132. Voices from the Open Source Revolution 1999, O'Reilly, Sebastol, CA. C. DiBona, S. Ockman, M. Stone (Eds.).
133. "CDRH Software Forensics Lab: Applying Rocket Science to Device Analysis" Chloe Taft, "Medical Devices Technology, "The Gray Sheet (October, 2007).
134. Boogerd C., Moonen L. Assessing the Value of Coding Standards: An Empirical Study October 2008, IEEE International Conference on Software Maintenance, 277-86.
135. Barr M. Embedded C Coding Standard 2009, Netrino.
136. http://www.splint.org.
137. ISO/IEC 9899-1999 (December 1999).
138. C-The C1X Charter. Document WG14N1250 (June 2007).
139. ISO/IEC 14882:2011. Programming Language-C++ (August 2011).
140. National Institute of Standards and Technology National Vulnerability Database http://web.nvd.nist.gov/view/vuln/detailvulnId=CVE-2010-2836.
141. General Principles of Software Validation. Final Guidance for Industry and FDA Staff January 11, 2002, U.S. Food and Drug Administration, Center for Devices and Radiological Health.
142. Software Considerations in Airborne Systems and Equipment Certification December 1992, Document RTCA/DO-178B, RTCA.
143. Dupuy A., Leveson N. An Empirical Evaluation of the MC/DC Coverage Criterion on the HETE-2 Satellite Software October 2000, Proceedings of the Digital Aviation Systems Conference (DASC).
144. Sergiy V.A., Bowen J.P. From MC/DC to RC/DC: Formalization and Analysis of Control-Flow Testing Criteria. Formal Aspects of Computing 2002, 18(1).
145. Common Criteria for Information Technology Security Evaluation, Part 3: Security Assurance Requirements, Version 2.1 August 1999, Section 6.2.4.
146. Shapiro J.S. Understanding the Windows EAL4 Evaluation. Computer February 2003, 36(2):103-105.
147. Labeled Security Protection Profile, Version 1.b Section 1.2, p. 9. http://www.niap-ccevs.org/cc-scheme/pp/PP_OS_LS_V1.b.pdf.
148. U.S. Government Protection Profile for General Purpose Operating Systems in a Networked Environment. Version 1.0 August 30, 2010.
149. U.S. Government Protection Profile for Separation Kernels in Environment Requiring High Robustness, Version 1.03 Section 1.2, paragraph 9, p. 10. http://www.niap-ccevs.org/cc-scheme/pp/pp_skpp_hr_v1.03.pdf.
150. Controlled Access Protection Profile, Version 1.d Section 1.2, p. 9. http://www.niap-ccevs.org/cc-scheme/pp/pp_os_ca_v1.d.pdf.
151. Labeled Security Protection Profile, Version 1.b Section 1.2, p. 9. http://www.niap-ccevs.org/cc-scheme/pp/PP_OS_LS_V1.b.pdf.
152. U.S. Government Protection Profile for Single-level Operating Systems in Medium Robustness Environments, Version 1.91 Section 1.2, paragraph 11, p. 10. http://www.niap-ccevs.org/cc-scheme/pp/PP_OS_SL_MR2.0_V1.91.pdf.
153. U.S. Government Protection Profile for Multilevel Operating Systems in Medium Robustness Environments, Version 1.91 Section 1.2, paragraph 11, p. 10. http://www.niap-ccevs.org/cc-scheme/pp/pp_os_ml_mr2.0_v1.91.pdf.
154. Department of Defense Instruction 8500.2, Information Assurance (IA) Implementation February 6, 2003.
155. Common Criteria for Information Technology Security Evaluation, Part 3: Security Assurance Requirements, Version 2.1 August 1999, Section 10, paragraph 308.
156. IEEE Standard Glossary of Software Engineering Terminology September 1990, IEEE Std 610.12-1990.
157. 2011 Embedded Engineer Survey 2011, VDC Research.
158. Ebert C., Jones C. Embedded Software: Facts, Figures, and Future. Computer April 2009, 42(4):42-52.
159. Dijkstra EW. Notes on Structured Programming. Technological University Eindhoven, Department of Mathematics. The Netherlands; August 1969.
160. OMG Unified Modeling Language (OMG UML), Infrastructure, Version 2.4.1 August 2011, Object Management Group.
161. Friedenthal S., Moore A., Steiner R. A Practical Guide to SysML: The Systems Modeling Language 2008, Elsevier, Burlington, MA.
162. Mellor S.J., Balcer M.J. Executable UML, A Foundation for Model-Driven Architecture 2002, Addison-Wesley, Reading, MA.
163. 2011 Embedded Engineer Survey 2011, VDC Research.
164. Prowell S.J., Poore J.H. Specification, Foundations of Sequence-Based Software. IEEE Transactions on Software Engineering May 2003, 417-425.
165. Roscoe A.W. Understanding Concurrent Systems 2010, Springer Verlag London Ltd., London.
166. Hoare C.A. Monitors: An Operating System Structuring Concept. Communications of the ACM October 1974, 547-548.
167. Halbwachs N., Caspi P., Raymond P., Pilaud D. The Synchronous Dataflow Programming Language Lustre. Proceedings of the IEEE September 1991, 79(9):1305-1320.
168. Berry G., Gonthier G. The Esterel Synchronous Programming Language, Design, Semantics and Implementation. Science of Computer Programming February 1992, 87-152.
169. COTS Compartmentalized Operations Protection Profile - Operating Systems (CCOPP-OS), Version 2.0; June 19, 2008.
170. Kahn D. The Codebreakers: History of Secret Communication from Ancient Times to the Internet 1967, Scribner, New York, NY.
171. Kahn D. Seizing the Enigma: The Race to Break the German U-Boats Codes, 1939-1943 1991, Barnes and Noble.
172. Deavours C.A., et al. Cryptology: Machines, History, and Methods 1989, Artech House, Inc.
173. Fact Sheet No. 1 for the National Policy on the Use of the Advanced Encryption Standard (AES) to Protect National Security Systems and National Security Information (CNSSP-15) (June 2003).
174. NSA Suite B Cryptography http://www.nsa.gov/ia/programs/suiteb_cryptography.
175. Gilbert VS. Secret Signaling System. U.S. Patent 1310719, issued July 22, 1919.
176. Claude S., et al. Communication Theory of Secrecy Systems. Bell System Technical Journal 1949, 28(4):656-715.
177. Song D., et al. Timing Analysis of Keystrokes and Timing Attacks on SSH. Proceedings of the 10supth/sup Conference on USENIX Security Symposium 2001, vol. 10.
178. AES Key Wrap Specification http://csrc.nist.gov/groups/ST/toolkit/documents/kms/AES_key_wrap.pdf.
179. Counter with CBC-MAC (CCM). Network Working Group, Request for Comments: 3610 (September 2003).
180. NIST Special Publication 800-38C. Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality (May 2004).
181. Vinodh G, et al. Optimized Galois-Counter-Mode Implementation on Intel Architecture Processors (April 2010).
182. Kleinjung, Thorsten, et al. Factorization of a 768-Bit RSA Modulus, version 1.4 February 18, 2010, http://eprint.iacr.org/2010/006.pdf.
183. NIST Special Publication 800-57. Recommendation for Key Management-Part 1: General (Revised) (March 2007).
184. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, Internet Engineering Task Force, Request for Comments: 5280 (May 2008).
185. Suite B Certificate and Certificate Revocation List (CRL) Profile, Internet Engineering Task Force, Request for Comments: 5759 January 2010.
186. SEC 4: Elliptic Curve Qu-Vanstone Implicit Certificate Scheme (ECQV), Version 0.97, Certicom Research (March 2011).
187. Xiaoyun W, Lisa Y, Hongbo Y. Finding Collisions in the Full SHA-1 (February 2005). Proceedings of Crypto Core.
188. Xiaoyun W, Andrew CY, Frances Y. Cryptanalysis on SHA-1, Presented by Adi Shamir at the Rump Session of CRYPTO 2005.
189. Secure Hash Standard August 1, 2002, Federal Information Processing Publication 180-2.
190. HMAC: Keyed-Hashing for Message Authentication, Internet Engineering Task Force, Request for Comments: 2104 (February 1997).
191. NIST FIPS PUB 198 The Keyed-Hash Message Authentication Code (HMAC) 2002, http://csrc.nist.gov/publications/fips/fips198/fips-198a.pdf.
192. NIST Special Publication 800-22-Revision 1a. A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications (April 2010).
193. Annex C: Approved Random Number Generators for FIPS PUB 140-2, Security Requirements for Cryptographic Modules (DRAFT) (June 14, 2011).
194. NIST Special Publication 800-90A-Revision 1. Recommendation for Random Number Generation Using Deterministic Bit Generators (Revised) (May 2011).
195. ANSI X9.82-3-2007. Random Number Generation-Part 3: Deterministic Random Bit Generators (September 2007).
196. Oswald D., Paar C. Breaking Mifare DESFire MF3ICD40: Power Analysis and Templates in the Real World. CHES 2011, Nara September 30, 2011.
197. International Telecommunications Union. Telecommunication Standardization Sector, G.729: Coding of Speed at 8 kbit/s Using Conjugate-Structure Algebraic-Code-Excited Linear Prediction (CS-ACELP) (January 2007).
198. Federal Information Processing Standards Publication 140-2: Security Requirements for Cryptographic Modules May 2001, National Institute of Standards and Technology.
199. Federal Information Processing Standards Publication 140-2: Security Requirements for Cryptographic Modules, (January 11, 1994).
200. Federal Information Processing Standards Publication 140-3: Security Requirements for Cryptographic Modules (Revised DRAFT) (September 11, 2009).
201. Annex F. Non-Invasive Attack Methods for FIPS PUB 140-3 (Draft), Security Requirements for Cryptographic Modules September 10, 2009, NIST Computer Security Division.