Feature: System security
Figure 1: When activated in the BIOS, the Secure Memory Encryption of the AMD processor protects memory data from cold- start or platform-reset attacks
Full V2X will allow vehicles to communicate with all parts of the traffic system
Figure 2: Secure Encrypted Virtualisation allows each virtual machine to be encoded with a separate AES-128 key that is known only to the hardware-isolated secure processor
Figure 3: The AMD SEV Encrypted State security feature can be enabled in AMD EPYC 7002 CPUs
the periphery of the cloud, to locally process the collected data. When increasingly-powerful server technology is moved to the edge, this also impacts the local infrastructure and network administration, since edge servers are also responsible for orchestrating the local networks. As a result, powerful systems for Network Function Virtualisation (NFV) and Soſtware-Defined Networking – initially used mainly at the carrier or provider level – are now required in the industrial environment, too. Tese can be designed as standalone rugged appliances, or consolidated directly in edge servers as virtualised systems.
Challenges at the edge Edge server hardware, however, needs to meet significantly different requirements, such as environmental conditions – temperature, humidity, vibrations, etc. Systems like these are also expected to work non-stop, for extended periods of time, requiring long-term availability of their components. Another important aspect in the network edge is data security;
edge servers can be exposed to Internet attacks via WAN links. Ten, there’s the challenge of running different systems and
applications, and most likely from several customers or service providers, securely and separately on the same edge server and processor. Tis makes each of these virtual servers – right up to the hypervisor itself – a potential attack “surface” from where to
18 September 2022
www.electronicsworld.co.uk
infiltrate or manipulate other virtual machines, or steal data. In addition to the manufacturer-provided security APIs, all these challenges call for rugged and powerful embedded CPU platforms with effective hardware-enforced security features that protect against numerous attacks – including the notorious side-channel hacks. AMD has already integrated the security features into the core architecture of its x86-based EPYC processor platforms, as well as its AMD EPYC Embedded processors, used as server CPUs for harsh edge environments.
Hardware-enforced security AMD has used its “Zen” microarchitecture in its server processor families EPYC Embedded 3000, 7001 and 7002, suitable for industrial edge servers, networks and storage devices. Now system developers can benefit from the same advantages that have made AMD EPYC processors so successful in data centres, with the additional benefits of extended availability and robustness. Particularly noteworthy are the integrated datacentre-grade security features that ensure the best possible protection of the processed data, even beyond confined datacentre environments and difficult-to-monitor locations. Te central element and root of trust is the dedicated AMD Secure Processor, which provides individual security features with AES128 keys that can’t be read by soſtware, for example via a hypervisor, and are not even known to the CPU itself.
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40
