RusTEE: Developing Memory-Safe ARM TrustZone Applications
RusTEE: Developing Memory-Safe ARM TrustZone Applications
复制标题
DOI：
10.1145/3427228.3427262
复制
发表时间：
2020-12
期刊：
影响因子：
--
通讯作者：
Shengye Wan;Ning Zhang
中科院分区：
文献类型：
--
作者：
Shengye Wan;Ning Zhang
在过去的十年中，ARM Trustzone提供的可信赖的执行环境（TEE）正在成为增强移动设备安全性的主要技术之一。但是，富裕的执行环境（REE）。攻击其他受信任的应用程序甚至是受信任的操作系统。为了减轻本文中的流行记忆损坏。增强TA的安全性，尽管高级想法是很直接的，但我们解决了在移动tee中采用的一些挑战，因为Rust当前不支持任何信任的T恤，为了提供此类支持。与不信任的REE进行安全通信。
In the past decade, Trusted Execution Environment (TEE) provided by ARM TrustZone is becoming one of the primary techniques for enhancing the security of mobile devices. The isolation enforced by TrustZone can protect the trusted applications running in the TEE against malicious software in the untrusted rich execution environment (REE). However, TrustZone cannot completely prevent vulnerabilities in trusted applications residing in the TEE, which can then be used to attack other trusted applications or even the trusted OS. Previously, a number of memory corruption vulnerabilities have been reported on different TAs, which are written in memory-unsafe languages like C. Recently, various memory-safe programming languages have emerged to mitigate the prevalent memory corruption bugs. In this paper, we propose RusTEE, a trusted application mechanism that leverages Rust, a newly emerged memory-safe language, to enhance the security of TAs. Though the high-level idea is quite straight-forwarding, we resolve several challenges on adopting Rust in mobile TEEs. Specifically, since Rust currently does not support any TrustZone-assisted TEE systems, we extend the existing Rust compiler for providing such support. Also, we apply comprehensive security mechanisms to resolve two security issues of trusted applications, namely, securely invoking high-privileged system services and securely communicating with untrusted REE. We implement a prototype of RusTEE as the trusted applications’ SDK, which supports both emulator and real hardware devices. The experiment shows that RusTEE can compile applications with close-to-C performance on the evaluated platforms.