.png){kind=icon}
返回
CacheIEE: Cache-Assisted Isolated Execution Environment on ARM Multi-Core Platforms
.png){kind=icon}
PRE
AI
DOI：10.1109/TDSC.2023.3251418.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
ARM TrustZone technology has been widely used to create Trusted Execution Environments (TEEs) for enhancing the security of applications. However, the increasing number of installed security-sensitive applications in the secure world will inevitably enlarge the trusted computing base (TCB) of TEE systems. To minimize the TCB of the secure world and increase application portability, Isolated Execution Environments (IEEs) are proposed to protect applications in enclaves created in the normal world. However, existing IEE systems cannot provide the same level of security as the TEE systems, particularly, on resolving the multi-vector attacks that include both physical memory disclosure attacks and software attacks. In this article, we develop a new cache-assisted IEE system called CacheIEE that creates enclaves in the L1 data cache of the normal world to protect sensitive data against multi-vector attacks. First, by always storing the sensitive data in the L1 data cache, CacheIEE can effectively prevent physical memory disclosure attacks. Second, we protect the L1 data cache against untrusted rich OS running in other cores. To support more applications, CacheIEE can process large-size sensitive data in the L1 data cache with constrained capacity. We implement a system prototype of CacheIEE and verify its security and practicability.
Keyword:
Security
Program processors
Monitoring
Codes
Hardware
Random access memory
Prototypes
TrustZone
isolated execution environment
cache-assisted
期刊
IF:
7.5
论文数:
2.5K
被引数:
9.6K
机构
引用论文
.png){kind=icon}
分享收藏
查看更多内容