treVM: Tiny Rust Embedded Virtual Machines with WASM on Variable Resource-Constrained Hardware

2026-04-30

AI Summary

This work addresses the challenge of deploying modern, updatable application logic on resource-constrained microcontrollers, which typically lack the capabilities required for advanced networked device functionality. To bridge this gap, the authors propose and implement treVM, a lightweight, secure, and remotely updatable WebAssembly (WASM) virtual machine framework built in Rust and designed to run atop the Ariel OS. treVM is the first such framework to demonstrate a universal WASM execution environment across heterogeneous 32-bit microcontroller architectures, including Arm Cortex-M, RISC-V, and Xtensa. Empirical evaluation on multiple mainstream development boards confirms its feasibility, with benchmark results showing that treVM enables efficient, secure deployment and dynamic updating of applications on low-resource embedded systems, effectively narrowing the divide between power-efficient hardware and sophisticated application logic.

Abstract

Software stacks embedded on microcontroller-based hardware typically provide rudimentary APIs programmed in C/C++, basic connectivity and, sometimes, a firmware update mechanism. Such coarse mechanisms contrast with widely used APIs and more advanced networked interaction expected from software stacks deployed on less resource-constrained hardware (microprocessor-based). In this paper, we aim to bridge this gap by designing treVM, a generic scheme to host high-level WebAssembly code capsules, bolted on a general-purpose Rust embedded software platform, able to run on a large variety of 32-bit microcontrollers. Not only can treVM capsules host highly customizable business logic, but capsules can also be securely updated on demand over the network, on devices already deployed in the field. We implement treVM in Rust, on top of Ariel OS, a general-purpose RTOS, and we publish the code as open source. Based on our implementation, we validate the feasibility of treVM on commonly available boards, and we report on extensive benchmarks we performed on heterogeneous hardware including Arm Cortex-M, RISC-V, and Xtensa microcontroller architectures. As such, treVM provides a promising new framework to secure continuous deployment of embedded software on low-power networked devices.

Problem

• embedded systems
• resource-constrained hardware
• WebAssembly
• firmware update
• microcontrollers

Innovation

• WebAssembly
• Rust
• embedded virtual machine
• secure over-the-air update
• resource-constrained hardware