An Investigation of PSA Certified
Open Access
- 23 August 2022
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 1-8
Abstract
PSA (Platform Security Architecture) Certified is a security certification scheme for IoT hardware, software, and devices. The scheme is composed of security certification (PSA Certified Level 1/2/3) and functional API certification (PSA Certified Functional API). Up to now, this scheme has been adopted by many chip manufacturers, system/software developers, and OEMs (Original Equipment Manufacturers). In this paper, we investigate the PSA security certification and PSA functional API (Cryptography API, Storage API, and Attestation API) with its reference implementation. Also, we analyze the source code of the reference implementation by using Polyspace Bug Finder. Specifically, we found 1,385 coding defects in the PSA functional API reference implementation where high, medium, and low impact defects take up 44, 90, and 1,251, respectively. Then, we compare the PSA functional API and its reference implementation in several aspects. Throughout this paper, we explain the obtained analysis results and our findings in detail.Keywords
Funding Information
- NEDO (JPNP18015)
This publication has 6 references indexed in Scilit:
- A Guideline on Pseudorandom Number Generation (PRNG) in the IoTACM Computing Surveys, 2021
- Security Requirements for the Internet of Things: A Systematic ApproachSensors, 2020
- Security Considerations for Internet of Things: A SurveySN Computer Science, 2020
- A Survey on IoT Security: Application Areas, Security Threats, and Solution ArchitecturesIEEE Access, 2019
- Demystifying IoT Security: An Exhaustive Survey on IoT Vulnerabilities and a First Empirical Look on Internet-Scale IoT ExploitationsIEEE Communications Surveys & Tutorials, 2019
- Measurement and Analysis of Hajime, a Peer-to-peer IoT Botnet2019