Femto-Containers：低功耗IoT微控制器上小型软件功能的轻量级虚拟化和故障隔离
Femto-Containers: Lightweight Virtualization and Fault Isolation For Small Software Functions on Low-Power IoT Microcontrollers
摘要：
物联网微控制器上使用的低功耗操作系统运行时通常提供基本的API、基本的连接性，有时还提供（安全的）固件更新机制。相比之下，在限制较少的硬件上，网络软件已经进入无服务器、微服务和敏捷性的时代。为了弥合这一差距，在本文中，我们设计了Femto-Containers，这是一种新的中间件运行时，可以嵌入到异构的低功耗物联网设备上。Femto-Containers能够通过网络在低功耗物联网设备上安全地部署、执行和隔离小型虚拟软件功能。我们实施Femto-Containers，并提供RIOT（一种流行的开源物联网操作系统）中的集成。然后，我们评估我们的实现的性能，这是正式验证的故障隔离，保证RIOT是屏蔽逻辑加载和执行的毫微微容器。我们在各种流行的微控制器架构（Arm Cortex-M，ESP 32和RISC-V）上的实验表明，Femto-Containers在内存占用开销，能耗和安全性方面提供了有吸引力的权衡
英文摘要：
Low-power operating system runtimes used on IoT microcontrollers typically provide rudimentary APIs, basic connectivity and, sometimes, a (secure) firmware update mechanism. In contrast, on less constrained hardware, networked software has entered the age of serverless, microservices and agility. With a view to bridge this gap, in the paper we design Femto-Containers, a new middleware runtime which can be embedded on heterogeneous low-power IoT devices. Femto-Containers enable the secure deployment, execution and isolation of small virtual software functions on low-power IoT devices, over the network. We implement Femto-Containers, and provide integration in RIOT, a popular open source IoT operating system. We then evaluate the performance of our implementation, which was formally verified for fault-isolation, guaranteeing that RIOT is shielded from logic loaded and executed in a Femto-Container. Our experiments on various popular microcontroller architectures (Arm Cortex-M, ESP32 and RISC-V) show that Femto-Containers offer an attractive trade-off in terms of memory footprint overhead, energy consumption, and security
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
