A trusted monitoring mechanism for software runtime on domestic platforms

To address the issue of development requirement of trusted embedded systems， a trusted embedded hardware platform is designed， which is comprised of an full indigenous Root of Trust （RoT）， Loongson processors， Kunlun firmware and SylixOS domestic technology stack. On this basis， firstly， guided by an active defense philosophy， a dynamic runtime trusted verification mechanism is researched and designed for software code. Then， this mechanism performs real-time verification of software identity and code integrity both at program startup and execution， thereby preventing the execution of unauthorized programs or tampered code. Finally， a prototype of the trusted embedded platform is established and the proposed designs are validated. The experimental results demonstrate that the trustworthiness of equipment software can be effectively enhanced by using the proposed methodology.