论文标题
部分可观测时空混沌系统的无模型预测
Femto-Containers: Lightweight Virtualization and Fault Isolation For Small Software Functions on Low-Power IoT Microcontrollers
论文作者
论文摘要
物联网微控制器上使用的低功率操作系统运行时间通常提供基本的API，基本连接性，有时还提供（安全）固件更新机制。相比之下，在不受限制的硬件上，网络软件进入了无服务器，微服务和敏捷性的年龄。为了弥合这一差距，在论文中，我们设计了FEM To-Containers，这是一种新的中间件运行时，可以嵌入到异质的低功率IoT设备上。 FEMTO-Containers可以通过网络在低功率IoT设备上的小型虚拟软件功能的安全部署，执行和隔离。我们实施了FEMTO-Containers，并提供了Riot的集成，Riot是一种流行的开源物联网操作系统。然后，我们评估实施的性能，该实现已正式验证用于故障隔离，确保Riot免受FEMTO-CONTAINER中的逻辑加载和执行的影响。我们在各种流行的微控制器体系结构（ARM Cortex-M，ESP32和RISC-V）上进行的实验表明，FEMTO-containers在内存足迹开销，能源消耗和安全性方面提供了有吸引力的权衡
Low-power operating system runtimes used on IoT microcontrollers typically provide rudimentary APIs, basic connectivity and, sometimes, a (secure) firmware update mechanism. In contrast, on less constrained hardware, networked software has entered the age of serverless, microservices and agility. With a view to bridge this gap, in the paper we design Femto-Containers, a new middleware runtime which can be embedded on heterogeneous low-power IoT devices. Femto-Containers enable the secure deployment, execution and isolation of small virtual software functions on low-power IoT devices, over the network. We implement Femto-Containers, and provide integration in RIOT, a popular open source IoT operating system. We then evaluate the performance of our implementation, which was formally verified for fault-isolation, guaranteeing that RIOT is shielded from logic loaded and executed in a Femto-Container. Our experiments on various popular microcontroller architectures (Arm Cortex-M, ESP32 and RISC-V) show that Femto-Containers offer an attractive trade-off in terms of memory footprint overhead, energy consumption, and security
