Cyber-physical WebAssembly: Secure Hardware Interfaces and Pluggable Drivers

Authors:
  • MKMichiel Van Kenhove
    Michiel Van Kenhove
  • MSMaximilian Seidler
    Maximilian Seidler
  • FVFriedrich Vandenberghe
    Friedrich Vandenberghe
  • WDWarre Dujardin
    Warre Dujardin
  • WHWouter Hennen
    Wouter Hennen
  • AVArne Vogel
    Arne Vogel
  • MSMerlijn Sebrechts
    Merlijn Sebrechts
  • TGTom Goethals
    Tom Goethals
  • FTFilip De Turck
    Filip De Turck
  • BVBruno Volckaert
    Bruno Volckaert
Preprint
Publisher website
Google Scholar
Abstract
The rapid expansion of Internet of Things (IoT), edge, and embedded devices in the past decade has introduced numerous challenges in terms of security and configuration management. Simultaneously, advances in cloud-native development practices have greatly enhanced the development experience and facilitated quicker updates, thereby enhancing application security. However, applying these advances to IoT, edge, and embedded devices remains a complex task, primarily due to the heterogeneous environments and the need to support devices with extended lifespans. WebAssembly and the WebAssembly System Interface (WASI) has emerged as a promising technology to bridge this gap. As WebAssembly becomes more popular on IoT, edge, and embedded devices, there is a growing demand for hardware interface support in WebAssembly programs. This work presents WASI proposals and proof-of-concept implementations to enable hardware interaction with I2C and USB, which are two commonly used protocols in IoT, directly from WebAssembly applications. This is achieved by running the device drivers within WebAssembly as well. A thorough evaluation of the proof of concepts shows that WASI-USB introduces a minimal overhead of at most 8% compared to native operating system USB APIs. However, the results show that runtime initialization overhead can be significant in low-latency applications.