Minimum viable device drivers for ARM trustzone

Minimum viable device drivers for ARM trustzone
复制标题

ARM trustzone 的最小可行设备驱动程序

DOI:
10.1145/3492321.3519565
复制
发表时间:
2022
期刊:
Eurosys 2022
影响因子:
--
通讯作者:
Lin, Felix Xiaozhu
Lin, Felix Xiaozhu
中科院分区:
--
文献类型:
--
作者:
Guo, Liwei;Lin, Felix Xiaozhu

文献摘要

参考文献

被引文献

相似文献

虽然TrustZone可以隔离IO硬件,但它缺乏用于现代IO设备的驱动程序。而不是移植驱动程序,我们提出了一种新的方法来获得最低可行的驱动程序:开发人员行使一个完整的驱动程序和记录的驱动程序/设备的交互;处理的录音,dubbeddriverlets,在运行时访问IO设备的TEE重放。Driverlets解决了两个关键挑战:正确性和表现力,为此它们建立在一个称为交互模板的关键结构上。交互模板确保忠实地复制记录的IO作业(尽管是在新的IO数据上);它接受动态输入值;它容忍不确定的设备行为。我们在一系列复杂的设备上演示了driverlet,使它们首次可以访问Trust-Zone。我们的实验表明,driverlet是安全的,易于构建,并产生可接受的开销(与本机驱动程序相比为1.4倍-2.7倍)。Driverlet填补了TrustZone TEE的一个关键空白,实现了其长期承诺的安全IO愿景。
While TrustZone can isolate IO hardware, it lacks drivers for modern IO devices. Rather than porting drivers, we propose a novel approach to deriving minimum viable drivers: developers exercise a full driver and record the driver/device interactions; the processed recordings, dubbeddriverlets, are replayed in the TEE at run time to access IO devices. Driverlets address two key challenges: correctness and expressiveness, for which they build on a key construct calledinteraction template.The interaction template ensures faithful reproduction of recorded IO jobs (albeit on new IO data); it accepts dynamic input values; it tolerates nondeterministic device behaviors. We demonstrate driverlets on a series of sophisticated devices, making them accessible to Trust-Zone for the first time to our knowledge. Our experiments show that driverlets are secure, easy to build, and incur acceptable overhead (1.4×-2.7× compared to native drivers). Driverlets fill a critical gap in the TrustZone TEE, realizing its long-promised vision of secure IO.
DOI: 10.1145/3210240.3210334
发表时间: 2018-06
期刊: Proceedings of the 16th Annual International Conference on Mobile Systems, Applications, and Services
影响因子: --
作者:
Matthew Lentz;Rijurekha Sen;P. Druschel;Bobby Bhattacharjee
通讯作者: Matthew Lentz;Rijurekha Sen;P. Druschel;Bobby Bhattacharjee
Rushmore:使用 TrustZone 安全地显示静态和动画图像
DOI: --
发表时间: 2021
期刊: ACM SIGMOBILE International Conference on Mobile Systems, Applications, and Services
影响因子: --
作者:
Chang Min Park;Donghwi Kim;D. Sidhwani;Andrew Fuchs;Arnob Paul;Sung;Karthik Dantu;Steven Y. Ko
通讯作者: Steven Y. Ko
S2Net:保护智能家居路由器的隐私
DOI: --
发表时间: 2021
影响因子: 7.3
作者:
Seung;Hang Shi;Kun Tan;Yunxin Liu;Sukyoung Lee;Yong Cui
通讯作者: Yong Cui
大脑封闭术
DOI: --
发表时间: 2019
期刊: The 25th Annual International Conference on Mobile Computing and Networking
影响因子: --
作者:
Taegyeong Lee;Zhiqi Lin;Saumay Pushp;Caihua Li;Yunxin Liu;Youngki Lee;Fengyuan Xu;Chenren Xu;Lintao Zhang;Junehwa Song
通讯作者: Junehwa Song
使用白蚁自动合成设备驱动程序
DOI: --
发表时间: 2009
期刊: Symposium on Operating Systems Principles
影响因子: --
作者:
L. Ryzhyk;P. Chubb;I. Kuz;Etienne Le Sueur;Gernot Heiser
通讯作者: Gernot Heiser