Demystifying Arm TrustZone: A Comprehensive Survey

被引:272
作者
Pinto, Sandro [1 ]
Santos, Nuno [2 ]
机构
[1] Univ Minho, Ctr Algoritmi, Campus Azurem, P-4800058 Guimaraes, Portugal
[2] Univ Lisbon, Inst Super Tecn, INESC ID, Rua Alves Redol, P-1000029 Lisbon, Portugal
关键词
TrustZone; security; virtualization; TEE; survey; Arm; ARCHITECTURE; HARDWARE; INTERNET; VIRTUALIZATION; THINGS;
D O I
10.1145/3291047
中图分类号
TP301 [理论、方法];
学科分类号
081202 ;
摘要
The world is undergoing an unprecedented technological transformation, evolving into a state where ubiquitous Internet-enabled "things" will be able to generate and share large amounts of security- and privacy-sensitive data. To cope with the security threats that are thus foreseeable, system designers can find in Arm TrustZone hardware technology a most valuable resource. TrustZone is a System-on-Chip and CPU system-wide security solution, available on today's Arm application processors and present in the new generation Ann microcontrollers, which are expected to dominate the market of smart "things." Although this technology has remained relatively underground since its inception in 2004, over the past years, numerous initiatives have significantly advanced the state of the art involving Ann TrustZone. Motivated by this revival of interest, this paper presents an in-depth study of TrustZone technology. We provide a comprehensive survey of relevant work from academia and industry, presenting existing systems into two main areas, namely, Trusted Execution Environments and hardware-assisted virtualization. Furthermore, we analyze the most relevant weaknesses of existing systems and propose new research directions within the realm of tiniest devices and the Internet of Things, which we believe to have potential to yield high-impact contributions in the future.
引用
收藏
页数:36
相关论文
共 116 条
  • [1] Alves T., 2004, INFORM Q, V3, P4
  • [2] [Anonymous], NOT JUST DRONING RIS
  • [3] [Anonymous], 64 IA 32 ARCH SOFTW
  • [4] [Anonymous], P NETW DISTR SYST SE
  • [5] [Anonymous], P NETW DISTR SYST SE
  • [6] [Anonymous], ARM PLATF SEC ARCH O
  • [7] [Anonymous], THESIS
  • [8] [Anonymous], 2008, Proceedings of the 3rd ACM workshop on Scalable trusted computing, DOI DOI 10.1145/1456455.1456460
  • [9] [Anonymous], 2017, BREAK SECURE BOOT FP
  • [10] [Anonymous], BREAK ANDR FULL DISK