DVFS as a Security Failure of TrustZone-enabled Heterogeneous SoC
DVFS as a Security Failure of TrustZone-enabled Heterogeneous SoC
复制标题
DVFS 作为启用 TrustZone 的异构 SoC 的安全故障
DOI：
10.1109/icecs.2018.8618038
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
L. Bossuet
中科院分区：
文献类型：
--
作者：
El Mehdi Benhani;L. Bossuet
如今，大多数嵌入式系统都使用动态电压和频率缩放（DVF）来最大程度地减少能源消耗并最大化性能。 DVFS技术通过调节控制系统，电压和频率中消耗的能量的重要参数来起作用。为了实现此技术，操作系统（OS）包括动态控制电压调节器或频率调节器或两者的软件应用程序。在本文中，我们首次证明了频率调节器对支持信任的芯片（SOC）的恶意使用。我们演示了使用频率缩放来在支持信任的异质SOC中创建秘密通道。我们提供了四个概念证明，将敏感数据从SOC中的安全实体转移到非安全性数据。概念的第一个证明是从安全的手臂芯到SOC外部。第二个是从安全的臂芯到非安全臂芯。第三个是来自SOC可编程逻辑部分嵌入到非安全臂核心中的未经信任的第三方IP。最后的概念证明是从安全的第三方IP到非安全臂核心。
Today, most embedded systems use Dynamic Voltage and Frequency Scaling (DVFS) to minimize energy consumption and maximize performance. The DVFS technique works by regulating the important parameters that govern the amount of energy consumed in a system, voltage and frequency. For the implementation of this technique, the operating system (OS) includes software applications that dynamically control a voltage regulator or a frequency regulator or both. In this paper, we demonstrate for the first time a malicious use of the frequency regulator against a TrustZone-enabled System-on-Chip (SoC). We demonstrate a use of frequency scaling to create covert channel in a TrustZone-enabled heterogeneous SoC. We present four proofs of concept to transfer sensitive data from a secure entity in the SoC to a non-secure one. The first proof of concept is from a secure ARM core to outside of SoC. The second is from a secure ARM core to a non-secure one. The third is from a non-trusted third party IP embedded in the programmable logic part of the SoC to a non-secure ARM core. And the last proof of concept is from a secure third party IP to a non-secure ARM core.