Title of Presentation

Total Page:16

File Type:pdf, Size:1020Kb

Title of Presentation NaturalNatural EvolutionEvolution inin TheThe EmbeddedEmbedded WorldWorld Tom Wang Manager, ARM Marketing Jan., 2008 Confidential 1 Our Vision ARM designs technology that lies at the heart of advanced digital products 222 ARM’s Activities Connected Community Development Tools Software IP Processors memorymemory System Level IP: Data Engines SoCSoC Fabric 3D Graphics Physical IP 333 The ARM Strategy The SoC must enable the device manufacturer to produce highly desirable products Software to bring the The CPU is at system alive and to the heart of a maximise the System on Chip performance of the system Software O E Ms EMs Processors O System on Chips Software tools, ESL Systems require high tools and models to Tools and Physical IP performance Fabric target software onto OEMs along with high the processors in the quality Physical IP system 444 ARM Cortex Family of Processors Bringing the benefits of architectural innovation across the spectrum ARM Cortex- Series: A Cortex-A8 Applications processors for complex OS and user applications ARM Cortex-R Series: Cortex-R4F Embedded processors for real-time systems Cortex-R4 ARM Cortex-M Series: Cortex-M3 Deeply embedded processors optimized for Cortex-M1 microcontroller and low-power applications 555 ARM Processor Portfolio Leading the industry in ARM Cortex performance and low power “Intelligent Computing” 2000 Cortex-A8 1500 1000 DMIPS x4 ARM1176JZF-S Cortex-R4F 750 Cortex-R4 ARM11 MPCore 500 ARM1026EJ-S ARM926EJ-S 250 ARM7TDMI ARM968E-S SC100 Cortex-M3 Cortex-M1 2007 666 ARM Processor Public Licensees Processor Total # Public licensees Family/Core Licenses Cortex Family 23 Cortex-A8 7 Freescale, Matsushita, Samsung, ST, TI Cortex-R4/R4F 8 Broadcom, TI Cortex-M3 7 Actel, Broadcom, Luminary, ST, TI ARM11 Family 53 LSI, NEC, Qualcomm, Sunplus, Toshiba ....... ARM11 MPCore 10 NEC, Nvidia, Renesas, Sarnoff CoreSight 22 Broadcom, Philips, Samsung ……. ARM9 Family 223 ADI, Fujitsu, Infineon, Sharp, Sony, TSMC ……. ARM7 Family 148 Atmel, Cnxnt, Intel, Mediatek, National, SiRF …. 777 Investing in R&D Major challenges can only be met by significant, ongoing investments Need integrated solutions ARM continues to invest over a vast spectrum From 1GHz+ processors to 8-bit MCU replacement Optimized 90, 65 and 45nm low power libraries Software, tools, Fabric, Audio & Graphics processors ARM’s model allows this to be shared across the Partnership 888 Market Driven Roadmaps Central Product Definition R&D Project Approval Roadmap Investment ~ $117m p.a. Roadmaps created by divisions from market input and innovation 999 Processors for All Applications H Cortex-A9 MPCore 2000+ DMIPS Multi-Proc Applications Cortex-A8 2000+ DMIPS Uni-proc Processor ARM11 MPCore 600+ DMIPS Multi-Proc Market ARM1176J(F)-S 600+ DMIPS Uni-Proc L ARM926EJ-S 250+DMIPS Uni-Proc ARM1156T2(F)-S 600+ DMIPS Uni-Proc H Real-Time ARM946E-S Cortex R4(F) 600+ DMIPS Uni-Proc Embedded ARM968E-S Market L 150+ DMIPS Uni-Proc ARM7TDMI 100+ DMIPS Uni-Proc Microcontroller H ARM7TDMI Cortex-M3 & FPGA Market L Cortex-M1 1010 10 Cumulative Processor Licenses ARMv7 Cortex-A9 4 ARMv6 Cortex-A8 ARM11TM 9* Family 58 ARMv5 Cortex-R4 10 233 ARM9TM ARMv4 Family Increasing Performance Cortex-M3 11* ARM7TM Family 151 Note: A further 26 licenses have been signed for ARM10TM and SecurCoreTM family processors, and Xscale/StrongARM. * One additional partner has access to Cortex-A8 and Cortex- M3 under a subscription license 111111 ARM Physical IP Products Library platforms Standard cells Pervasive SoC IP Embedded memory I/O functionality MemoryMemory High-speed interfaces ••ClassicClassic ••MetroMetro MemoryMemory DDR ••AdvantageAdvantage DDRDDR Serial PHYs SerialSerial PHYsPHYs StandardStandard CellsCells ••SageSage ••MetroMetro MemoryMemory ••AdvantageAdvantage I/OI/O CellsCells 1212 12 Cumulative Physical IP Licenses 1* 6 45 nm 3 5 65 nm 3 20 24 90 nm 4 31 9 18 26 130 nm 47 18 24 2 Increasing Complexity 180 nm 62 Metro Advantage Classic Velocity 27 SOI 250 nm * 45nm SOI License signed early in Q4 1313 13 Performance/Power Flexibility Performance ARM1176JZ-S Performance Platform ARM1176JZ-S Advantage-HS Mainstream Platform 90G Worst case 90G Worst Performance 620MHz 320MHz Boost 0.45mW/MHz 0.25mW/MHz 2.65sq mm 1.55sq mm Power/Area Reduction Density Optimized Platform All data estimated for full implementations Power 141414 RealView® Tools for Entire Design Flow IP Creation Core Generator Architectural Exploration SoC Designer Microcontroller Software Development µVision IDE and ULINK Pre-silicon Software Development Development Suite and SoC Designer Applications Development Hardware/Software Development Suite and Integration System Generator Software Optimization Development Suite and Profiler, ICE & Trace and System Generator ICE & Trace 1515 15 Applications Processor Roadmap ARM Cortex “Intelligent Computing” 2000 Cortex-A8 1500 1000 DMIPS x4 ARM1176JZF-S 750 ARM11 MPCore 500 ARM1026EJ-S ARM926EJ-S 250 ARM7TDMI ARM968E-S SC100 2007 1616 16 ARM1176JZ(F)-S 620 MHz ARM11 Applications processor Fast, 8-stage pipeline Dynamic Branch Prediction & Return stack Optional Vector Floating Point ARMv6Z Architecture SIMD Media extensions, Jazelle for Java Enhanced Real-time performance (Fast Interrupt Mode / VIC support) IEM Enabled Supports multiple voltage domains (Dormant Mode) and Voltage Scaling ARM TrustZone™ Architecture extensions for CPU and system security High Performance AXI Memory System Configurable I & D Caches and TCMs with dedicated 64-bit DMA 0.13um process 90nm process 90nm GT process PPA Speed Opt Area Opt Speed Opt Area Opt Speed Opt Standard Cells SAGE-HS Artisan Advantage-HS Metro Advantage Memories - HSHD Optimised Metro Advantage Frequency ( MHz ) 364 317 610 320 750 Area with cache (mm2) 6.46 5.51 2.54 1.42 2.1 Area without cache (mm2) 4.77 3.61 1.89 0.82 1.46 Cache size 16K/16K 16K/16K 16K/16K 16K/16K 16K/16K Power with cache (mW/MHz) 1.29 1.24 0.36 0.25 0.568 Power w/o cache (mW/MHz) 0.58 0.50 0.29 0.18 0.465 ** The above numbers are either quoted from fully floorplanned layouts/synthesis trials or scaled with respect to process and library performance 171717 ARM11MPCore Configurable multiprocessor with 1 to 4 processors 16K to 64K caches across each processor Dual or single 64-bit AMBA 3 AXI bus Configurable VFP unit for each processor ARMv6K Architecture Thumb, Jazelle, DSP extensions and SIMD Energy management Standby, dormant and power off states for each processor Intelligent Energy Manager (IEM) High performance memory system Cache coherence, L1 sharing, cork-screw cache memory design Reduced software complexity, standard OS view Asymmetric (AMP) and Symmetric (SMP) multiprocessing 90nm process PPA Speed Opt Area Opt Standard Cells Advantage-HS Metro Memories Optimised Metro Frequency (MHz) 608 320 Area with cache (mm2) 2.22 1.46 Area without cache (mm2) 1.56 0.90 Cache size 16K/16K 16K/16K Power with cache (mW/MHz) 0.32 0.23 Power w/o cache (mW/MHz) 0.27 0.18 ** The above numbers are either quoted from fully floorplanned layouts/synthesis trials or scaled with respect to process and library performance 181818 Cortex-A8 High Performance Applications processor Superscalar pipeline offers 2,000+ DMIPS Integrated L2 Cache with configurable size (0K-1MB), ECC High performance with excellent code density Thumb-2 hybrid 16-32-bit instruction set Architecture extensions for CPU and system security TrustZone™ Secure transactions & Digital Rights Management (DRM) Multimedia and Signal Processing Architecture NEON™ provides over 2x Performance of ARMv6 SIMD OpenMAX library and API’s for fast software development Efficient Run Time Compilation Target Jazelle-RCT: Target for Java. Memory footprint reduced up to 3x Can also target languages such as Microsoft .NET MSIL, Python 65nm LP process 65nm G+ process PPA Optimized Synthesized Optimized Synthesized Standard Cells Advantage-CE Advantage-HS Advantage-CE Advantage-HS Memories Custom Advantage** Custom Advantage** Frequency (MHz) 660-700 500-550 1.1 GHz+ 800+ Area with cache (mm2) 3.86 4.2 3.86 4.2 Area without cache (mm2) 2.79 3.1 2.79 3.1 Cache size 32K/32K 32K/32K 32K/32K 32K/32K Power with cache (mW/MHz) 0.58 0.75 0.43 0.55 Power w/o cache (mW/MHz) - - - - ** Optimized instances of Advantage RAMS Optimized data scaled from 90G Area includes L1 RAMS, L2 control. Excludes NEON, ETM, L2 RAMS 65 GP synthesized data scaled from 65LP 191919 Embedded Processor Roadmap ARM Cortex “Intelligent Computing” Cortex-R4 Cortex-R4F MIPS) ARM1156T2F-S ARM1026EJ-S ARM966E-S Performance (D ARM946E-S ARM968E-S ARM7TDMI ARM7EJ-S Cortex-M3 ARM996HS Cortex-M1 ARM7TDMI-S 2006 2007 Worst case conditions 2020 20 Cortex-M3 Cortex-M3 for cost-sensitive, low-power 32-Bit devices Complete processor for microcontroller and low cost applications Thumb-2 technology for greater performance and code density Hardware divide instructions for control applications Cortex-M3 includes configuration options for application fit Integrated NVIC for industry leading interrupt handling Extensive debug architecture with up to 8 hardware breakpoints Optional Memory Protection Unit (MPU) Flexible bus interfaces for easy system integration 0.13um process 90nm process CM3 Core Speed Opt Perf Opt Area Opt Speed Opt Perf Opt Area Opt Standard Cells SAGE-X SAGE-X Metro Advantage Advantage Advantage Frequency (MHz) 135 100 50 191 100 50 Area without cache (mm2) 0.43 0.24 0.21 0.21 0.14 0.13 Power w/o cache (mW/MHz) 0.14 0.079 0.07 0.07 0.044 0.04 Cortex-M3 Processor 0.13um
Recommended publications
  • Bootstomp: on the Security of Bootloaders in Mobile Devices
    BootStomp: On the Security of Bootloaders in Mobile Devices Nilo Redini, Aravind Machiry, Dipanjan Das, Yanick Fratantonio, Antonio Bianchi, Eric Gustafson, Yan Shoshitaishvili, Christopher Kruegel, and Giovanni Vigna, UC Santa Barbara https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/redini This paper is included in the Proceedings of the 26th USENIX Security Symposium August 16–18, 2017 • Vancouver, BC, Canada ISBN 978-1-931971-40-9 Open access to the Proceedings of the 26th USENIX Security Symposium is sponsored by USENIX BootStomp: On the Security of Bootloaders in Mobile Devices Nilo Redini, Aravind Machiry, Dipanjan Das, Yanick Fratantonio, Antonio Bianchi, Eric Gustafson, Yan Shoshitaishvili, Christopher Kruegel, and Giovanni Vigna fnredini, machiry, dipanjan, yanick, antoniob, edg, yans, chris, [email protected] University of California, Santa Barbara Abstract by proposing simple mitigation steps that can be im- plemented by manufacturers to safeguard the bootloader Modern mobile bootloaders play an important role in and OS from all of the discovered attacks, using already- both the function and the security of the device. They deployed hardware features. help ensure the Chain of Trust (CoT), where each stage of the boot process verifies the integrity and origin of 1 Introduction the following stage before executing it. This process, in theory, should be immune even to attackers gaining With the critical importance of the integrity of today’s full control over the operating system, and should pre- mobile and embedded devices, vendors have imple- vent persistent compromise of a device’s CoT. However, mented a string of inter-dependent mechanisms aimed at not only do these bootloaders necessarily need to take removing the possibility of persistent compromise from untrusted input from an attacker in control of the OS in the device.
    [Show full text]
  • Schedule 14A Employee Slides Supertex Sunnyvale
    UNITED STATES SECURITIES AND EXCHANGE COMMISSION Washington, D.C. 20549 SCHEDULE 14A Proxy Statement Pursuant to Section 14(a) of the Securities Exchange Act of 1934 Filed by the Registrant Filed by a Party other than the Registrant Check the appropriate box: Preliminary Proxy Statement Confidential, for Use of the Commission Only (as permitted by Rule 14a-6(e)(2)) Definitive Proxy Statement Definitive Additional Materials Soliciting Material Pursuant to §240.14a-12 Supertex, Inc. (Name of Registrant as Specified In Its Charter) Microchip Technology Incorporated (Name of Person(s) Filing Proxy Statement, if other than the Registrant) Payment of Filing Fee (Check the appropriate box): No fee required. Fee computed on table below per Exchange Act Rules 14a-6(i)(1) and 0-11. (1) Title of each class of securities to which transaction applies: (2) Aggregate number of securities to which transaction applies: (3) Per unit price or other underlying value of transaction computed pursuant to Exchange Act Rule 0-11 (set forth the amount on which the filing fee is calculated and state how it was determined): (4) Proposed maximum aggregate value of transaction: (5) Total fee paid: Fee paid previously with preliminary materials. Check box if any part of the fee is offset as provided by Exchange Act Rule 0-11(a)(2) and identify the filing for which the offsetting fee was paid previously. Identify the previous filing by registration statement number, or the Form or Schedule and the date of its filing. (1) Amount Previously Paid: (2) Form, Schedule or Registration Statement No.: (3) Filing Party: (4) Date Filed: Filed by Microchip Technology Incorporated Pursuant to Rule 14a-12 of the Securities Exchange Act of 1934 Subject Company: Supertex, Inc.
    [Show full text]
  • Mediatek Linkit™ Development Platform for RTOS Get Started Guide
    MediaTek LinkIt™ Development Platform for RTOS Get Started Guide Version: 3.0 Release date: 30 June 2016 © 2015 - 2016 MediaTek Inc. This document contains information that is proprietary to MediaTek Inc. (“MediaTek”) and/or its licensor(s). MediaTek cannot grant you permission for any material that is owned by third parties. You may only use or reproduce this document if you have agreed to and been bound by the applicable license agreement with MediaTek (“License Agreement”) and been granted explicit permission within the License Agreement (“Permitted User”). If you are not a Permitted User, please cease any access or use of this document immediately. Any unauthorized use, reproduction or disclosure of this document in whole or in part is strictly prohibited. THIS DOCUMENT IS PROVIDED ON AN “AS-IS” BASIS ONLY. MEDIATEK EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES OF ANY KIND AND SHALL IN NO EVENT BE LIABLE FOR ANY CLAIMS RELATING TO OR ARISING OUT OF THIS DOCUMENT OR ANY USE OR INABILITY TO USE THEREOF. Specifications contained herein are subject to change without notice. MediaTek LinkIt™ Development Platform for RTOS Get Started Guide Document Revision History Revision Date Description 1.0 24 March 2016 Initial version. 2.0 17 May 2016 Move the contents relative to flash, HDK, and build comments to corresponding documents. Add the support of Keil 3.0 30 June 2016 Add the support of IAR. Refine the architecture and provide more information on the SDK usage. © 2015 - 2016 MediaTek Inc. Page i of v This document contains information that is proprietary to MediaTek Inc.
    [Show full text]
  • We Shape the Connected World Automotive Autonomy Generating Energy Effectively Wearable Technology ARM’S Technology Is Cars Are Becoming Mobile Computing Platforms
    ARM Holdings plc Annual Report 2015: Strategic Report We shape the connected world Automotive autonomy Generating energy effectively Wearable technology ARM’s technology is Cars are becoming mobile computing platforms. Wind turbines and solar panels can be made Smart watches, biometric-monitors and More sensors and cameras are being included more effective by including technology that augmented reality headsets are intelligent, to assist the driver with lane detection, reading controls and monitors the wind turbine, and connected devices that can give us extra shaping the way we roadside signage and identifying potential hazards aggregates data across the entire wind farm. information to improve our health and or people crossing the road. In time, driver wellness, or just to help us have more fun. all live our lives; in the assistance may lead to a fully automated vehicle. home, as we travel, at school or work, and as we have fun with our friends Mobile computing Smart city streets Intelligent networks Smarter homes ARM-based mobile computers, including City infrastructure from street lights to car Broadband and mobile phone network speeds Cost-efficiency in the home can be improved smartphones, tablets and some laptops are, parking meters can be made more effective by are increasing, and latency decreasing, enabling through learning thermostats that understand for many people, the primary device for their embedding intelligent chips. Street lights that new services for operators to provide to your daily routine, domestic appliances that use work, whether in an office or on the road; can dim when no one is nearby will save energy consumers and enterprises, from delivering advanced algorithms for calculating water and for researching and writing school assignments; and reduce carbon emissions, and prognostics in more movie and TV options to collating and detergent requirements, and smart meters that and for engaging with friends.
    [Show full text]
  • M32R Family Software Manual MITSUBISHI 32-BIT SINGLE-CHIP MICROCOMPUTER
    To our customers, Old Company Name in Catalogs and Other Documents On April 1st, 2010, NEC Electronics Corporation merged with Renesas Technology Corporation, and Renesas Electronics Corporation took over all the business of both companies. Therefore, although the old company name remains in this document, it is a valid Renesas Electronics document. We appreciate your understanding. Renesas Electronics website: http://www.renesas.com April 1st, 2010 Renesas Electronics Corporation Issued by: Renesas Electronics Corporation (http://www.renesas.com) Send any inquiries to http://www.renesas.com/inquiry. Notice 1. All information included in this document is current as of the date this document is issued. Such information, however, is subject to change without any prior notice. Before purchasing or using any Renesas Electronics products listed herein, please confirm the latest product information with a Renesas Electronics sales office. Also, please pay regular and careful attention to additional and different information to be disclosed by Renesas Electronics such as that disclosed through our website. 2. Renesas Electronics does not assume any liability for infringement of patents, copyrights, or other intellectual property rights of third parties by or arising from the use of Renesas Electronics products or technical information described in this document. No license, express, implied or otherwise, is granted hereby under any patents, copyrights or other intellectual property rights of Renesas Electronics or others. 3. You should not alter, modify, copy, or otherwise misappropriate any Renesas Electronics product, whether in whole or in part. 4. Descriptions of circuits, software and other related information in this document are provided only to illustrate the operation of semiconductor products and application examples.
    [Show full text]
  • Mediatek Inc
    01 May 2015 Asia Pacific/Taiwan Equity Research Semiconductor Devices MediaTek Inc. (2454.TW / 2454 TT) Rating NEUTRAL* Price (30 Apr 15, NT$) 395.00 RESULTS Target price (NT$) 405.00¹ Upside/downside (%) 2.5 Mkt cap (NT$ mn) 708,117 (US$ 23,121) 2Q lacks growth, but a high bar is set for 2H Enterprise value (NT$ mn) 544,619 ■ 1Q15 results in line with CS, but below street. 1Q15 sales were already Number of shares (mn) 1,792.70 Free float (%) 89.1 reported at NT$47.5 bn, -14.3% QoQ. Smartphone shipments were 85 mn 52-week price range 535.0 - 390.0 (30mn LTE), down from 95-100mn in 4Q14 due to seasonality and emerging ADTO - 6M (US$ mn) 101.0 market weakness. GMs met our 47.3% vs 46-48% guidance and OpM was also *Stock ratings are relative to the coverage universe in each analyst's or each team's respective sector. in line at 16.1% on cost controls. Lower non-op income kept EPS only in line ¹Target price is for 12 months. with our NT$4.62 and below street's NT$4.97. Research Analysts ■ 2Q15 guidance below, inventory elevated. Sales were guided -5% to +3% Randy Abrams, CFA QoQ, below CS/street's +9%/+18% QoQ on 3G price pressure and 4G mix 886 2 2715 6366 [email protected] skewed to the entry level. Margins are in line, with GMs at 45.5-47.5% and Nickie Yue OpM at 12.5-16.5%. Inventory is elevated, at 102 days and guided to stay 886 2 2715 6364 98-110 days in 2Q15, requiring 2H15 acceleration.
    [Show full text]
  • IN the UNITED STATES DISTRICT COURT for the WESTERN DISTRICT of TEXAS WACO DIVISION AMERICAN PATENTS LLC, Plaintiff, V. ANALOG D
    Case 6:18-cv-00356 Document 1 Filed 12/06/18 Page 1 of 64 IN THE UNITED STATES DISTRICT COURT FOR THE WESTERN DISTRICT OF TEXAS WACO DIVISION AMERICAN PATENTS LLC, CIVIL ACTION NO. 6:18-CV-356 Plaintiff, ORIGINAL COMPLAINT FOR v. PATENT INFRINGEMENT ANALOG DEVICES, INC., CYPRESS JURY TRIAL DEMANDED SEMICONDUCTOR CORPORATION, MARVELL INTERNATIONAL, LTD., MEDIATEK INC., and MEDIATEK USA INC., Defendants. ORIGINAL COMPLAINT FOR PATENT INFRINGEMENT Plaintiff American Patents LLC (“American Patents” or “Plaintiff”) files this original complaint against Defendants Analog Devices, Inc., Cypress Semiconductor Corporation, Marvell International, Ltd., MediaTek Inc., and MediaTek USA Inc. (collectively “Defendants”), alleging, based on its own knowledge as to itself and its own actions and based on information and belief as to all other matters, as follows: PARTIES 1. American Patents is a limited liability company formed under the laws of the State of Texas, with its principal place of business at 2325 Oak Alley, Tyler, Texas, 75703. 2. Analog Devices, Inc. (“Analog”) is a corporation organized and existing under the laws of the state of Massachusetts. It can be served via its registered agent: CT Corp System, 1999 Bryan Street, Suite 900, Dallas, TX 75201. 3. Analog is one of the world’s largest manufacturers of integrated circuits. Case 6:18-cv-00356 Document 1 Filed 12/06/18 Page 2 of 64 4. Cypress Semiconductor Corporation (“Cypress”) is a corporation organized under the laws of the state of Delaware. Cypress can be served with process by serving its registered agent: Corporation Service Company d/b/a CSC-Lawyers Incorporating Service Company, 211 E.
    [Show full text]
  • Embedded Electronic Coding System
    1 GUARD FOR BLIND PEOPLE GUARD FOR BLIND PEOPLE ELECTRONICS AND COMMUNICATION LITAM 2 GUARD FOR BLIND PEOPLE ABSTRACT Aim of this project is to design and develop the electronic guard for blind people on embedded plat form. This project was developed for keep the right way for blind people. It has two important units; they are object detecting sensor unit and micro-controller alarm unit. The object detecting sensor is sense the opposite objects, if the blind person is going to hit any object, the sensor sense that object and given to controller. The controller activates the driver circuit; it will produce the alarm sound, now the people easily identify the opposite object. ELECTRONICS AND COMMUNICATION LITAM 3 GUARD FOR BLIND PEOPLE CHAPTER 1 INTRODUCTION ELECTRONICS AND COMMUNICATION LITAM 4 GUARD FOR BLIND PEOPLE 1.1 METHODOLOGY OF STUDY An embedded based electronic code locking system is designed and implemented using PIC Micro controller to make security. The entire project was developed under embedded systems. EMBEDDED SYSTEMS: A system is something that maintains its existence and functions as a whole through the interaction of its parts. E.g. Body, Mankind, Access Control, etc A system is a part of the world that a person or group of persons during some time interval and for some purpose choose to regard as a whole, consisting of interrelated components, each component characterized by properties that are selected as being relevant to the purpose. • Embedded System is a combination of hardware and software used to achieve a single specific task. • Embedded systems are computer systems that monitor, respond to, or control an external environment.
    [Show full text]
  • A Systematic Survey of Firmware Extraction Techniques for Iot Devices
    Breaking all the Things | A Systematic Survey of Firmware Extraction Techniques for IoT Devices Sebastian Vasile, David Oswald, and Tom Chothia University of Birmingham [email protected], [email protected], [email protected] Abstract. In this paper, we systematically review and categorize differ- ent hardware-based firmware extraction techniques, using 24 examples of real, wide-spread products, e.g. smart voice assistants (in particular Amazon Echo devices), alarm and access control systems, as well as home automation devices. We show that in over 45% of the cases, an exposed UART interface is sufficient to obtain a firmware dump, while in other cases, more complicated, yet still low-cost methods (e.g. JTAG or eMMC readout) are needed. In this regard, we perform an in-depth investiga- tion of the security concept of the Amazon Echo Plus, which contains significant protection methods against hardware-level attacks. Based on the results of our study, we give recommendations for countermeasures to mitigate the respective methods. 1 Introduction Extracting the firmware from IoT devices is a crucial first step when analysing the security of such systems. From a designer's point of view, preventing the firmware from falling into the hands of an adversary is often desirable: for in- stance, to protect cryptographic keys that identify a device and to impede prod- uct counterfeit or IP theft. The large variety of IoT devices results in different approaches to firmware extraction, depending on the device in question. Past work has looked at the state of security of IoT devices, e.g.
    [Show full text]
  • ARM Roadmap Spring 2017
    ARM Roadmap Spring 2017 Robert Boys [email protected] Version 9.0 Agenda . Roadmap . Architectures ARM1™ die . Issues . What is NEW ! . big.LITTLE™ . 64 Bit . Cortex®-A15 . 64 BIT . DynamIQ 3 © ARM 2017 In the Beginning… . 1985 32 years ago in a barn.... 12 engineers . Cash from Apple and VLSI . IP from Acorn Computers . Proof of concept . No patents, no independent customers, product not ready for mass market. A barn, some energy, experience and belief: “We’re going to be the Global Standard” 4 © ARM 2017 The Cortex Processor Roadmap in 2008 Application Real-time Microcontroller Cortex-A9 Cortex-A8 ARM11 Cortex-R4F ARM9 Cortex-R4 ARM7TDMI ARM7 Cortex-M3 SC300 Cortex-M1 5 © ARM 2017 5 Cortex-A73 ARM 2017 Processor Roadmap Cortex-A35 Cortex-A32 Cortex-A72 Cortex-A57 ARM 7, 9, 11 Cortex-A17 Application Cortex-A53 Cortex-A15 Real-time Not to scale to Not Cortex-A9 (Dual) Microcontroller Cortex-A9 (MPCore) Cortex-A8 Cortex-A7 ARM11(MP) Cortex-A5 MMU ARM926EJ-S Cortex-R52 No MMU Cortex-R8 200+ MHz Cortex-R7 ARM9 Cortex-R5 Cortex-R4 Cortex-M7 200+ MHz Cortex-M33 ARM7TDM 72 – 150 + MHz Cortex-M4 Cortex-M3 ARM7I SC300 Cortex-M23 DesignStart™ Cortex-M1 SC000 Cortex-M0+ Cortex-M0 6 © ARM 2017 6 Versions, cores and architectures ? Family Architecture Cores ARM7TDMI ARMv4T ARM7TDMI(S) ARM9 ARM9E ARMv5TE ARM926EJ-S, ARM966E-S ARM11 ARMv6 (T2) ARM1136(F), 1156T2(F)-S, 1176JZ(F), ARM11 MPCore™ Cortex-A ARMv7-A Cortex-A5, A7, A8, A9, A12, A15, A17 Cortex-R ARMv7-R Cortex-R4(F), Cortex-R5, R7, R8 … Cortex-M ARMv7-M Cortex-M3, M4, M7 (M7 is ARMv7-ME) ARMv6-M Cortex-M1, M0, M0+ NEW ! ARMv8-A 64 Bit: Cortex-A35/A53/57/A72 Cortex-A73 Cortex-A32 NEW ! ARMv8-R 32 Bit: Cortex-R52 NEW ! ARMv8-M 32 Bit: Cortex-M23 & M33 TrustZone® 7 © ARM 2017 What is New ? DynamIQ ! .
    [Show full text]
  • 042Cf377-Ed0c-4715-9260-770F680082fc.Pdf
    WiFi Tablets 70 Neon + The ARCHOS 70 Neon Plus is one of the most affordable tablets on the market. It includes a powerful quad-core processor running the latest Android operating system: Android™ 5.1 Lollipop®. The 7-inch IPS display provides incredible colors and wide viewing angles, perfect for enjoying your content on-the-go. The ARCHOS 70 Neon Plus is designed to offer a unique multimedia experience. AndroidTM 5.1, Lollipop® Android™ 5.1, “Lollipop” 7” IPS Capacitive Screen 1024x 600 pixels Rockchip 3126 Quad-Core CPU @ 1.3 GHz 1 GB RAM 8 GB flash memory (+ microSD slot) GB Micro SD Wifi WiFi, dual cameras, micro USB host, G-sensor, speaker... 8 4 5 90b Neon Featuring a powerful 1.2 GHz Quad-core processor and Dual-core graphics processor, the ARCHOS 90b Neon has a super smooth interface. At an affordable price, the ARCHOS 90b Neon delivers an amazing experience to meet all your needs: emails, movies, photos, web browsing… Android™ 4.4, “Kitkat” 9” Capacitive Screen 1024 x 600 pixels All Winner A33 Quad-Core CPU @ 1.2 GHz 512 MB RAM 8 GB flash memory (+ microSD slot) GB Wifi WiFi, dual cameras, micro USB host, G-sensor, 8 speaker... 6 7 101d Neon A mix between large screen and productivity, the ARCHOS 101d Neon includes a large 10.1” screen and ARCHOS media applications, perfect for your multimedia, wherever you are. Featuring a powerful Quad-core processor and Quad-core graphics processor, the ARCHOS 101d Neon offers a super smooth interface for an affordable price and delivers an amazing experience to meet all your needs.
    [Show full text]
  • VISION Calibration and Data Acquisition Software Toolkits
    VISION TM Toolkits VISION • No-Hooks • OnTarget • MBC VISION Calibration and Data Acquisition Software Toolkits ATI VISION Calibration and Data Acquisition software is modular in design based. The modularity of VISION toolkits provides the ability to customize VISION based on a desired level of functionality. VISION toolkits are task based feature groups that are based on customer usage models in the calibration and data acquisition fields. A VISION toolkit configuration can range from a single toolkit to view and analyze recorded data to a full ECU calibration solution with Rapid Prototyping features. Cost effective packages can easily be created based on end user need. This document contains the available VISION toolkits as of VISION 6.0. VISION Toolkits and Descriptions: Part Number Name Description Base VISION 3 Build device tree (All devices can be added to the tree, but cannot go online with any particular device unless the necessary toolkit is enabled). 3 Configure ATI hardware. 3 Acquire data from ATI Data Acquisition hardware into VISION recorders and screen objects (Not ECU Interfaces unless the appropriate ECU Interface Toolkit is enabled). 3 View data on a Data List (This is the only screen object available to view data). 3 CAN Trace object (Only ATI branded CAN Interface unless VISION Third Party CAN Interface Toolkit is enabled). 3 Configure Network Hub Logger functionality (Limited to only ATI Data Acquisition items or CAN objects unless ECU Interface Toolkits are present to enable configuring acquisition of ECU data items). 3 Retrieve data files from Network Hub Logger (Including attaching a DBC file upon NONE VISION Base retrieving of the files to convert CAN messages to signals).
    [Show full text]