Optimized trusted execution for hard real-time applications on COTS processors
Optimized trusted execution for hard real-time applications on COTS processors
复制标题
DOI：
10.1145/3356401.3356419
复制
发表时间：
2019-11
期刊：
影响因子：
--
通讯作者：
Anway Mukherjee;Tanmaya Mishra;Thidapat Chantem;N. Fisher;Ryan M. Gerdes
中科院分区：
文献类型：
--
作者：
Anway Mukherjee;Tanmaya Mishra;Thidapat Chantem;N. Fisher;Ryan M. Gerdes
虽然可信执行环境（TEE）提供行业标准的安全性和隔离，但其通过安全监视调用（SMC）的实现会导致大量时间开销和时间可预测性减弱，可能会禁止在硬实时系统中使用TEE。我们提出了超级TEE，其中多个受信任的执行部分融合在一起，以分摊TEE执行开销，并通过最小化I/O流量和减少正常模式和TEE执行模式之间的切换来提高可预测性。然而，超级TEE可能违反任务的时序要求并影响系统的可并行性。我们提出了一种技术，以执行正确的时间要求的任务，沿着与充分的测试，在单处理器的可扩展性。我们还讨论了ct-RM，一个静态的任务分配和分区调度算法调度超级TEE，以及其他实时任务，在多核系统。在Raspberry Pi 3B上的实验结果进一步通过模拟证实，表明ct-RM在可用利用率方面优于最先进的技术，平均可达12%，最高可达27%。
While trusted execution environments (TEE) provide industry standard security and isolation, its implementation through secure monitor calls (SMC) attribute to large time overhead and weakened temporal predictability, potentially prohibiting the use of TEE in hard real-time systems. We propose super-TEEs, where multiple trusted execution sections are fused together to amortize TEE execution overhead and improve predictability through minimized I/O traffic and reduced switching between normal mode and TEE mode of execution. Super-TEEs may, however, violate a task's timing requirement and impact the schedulability of the system. We present a technique to enforce the correct timing requirement of a task, along with a sufficient test for schedulability in uniprocessors. We also, discuss ct-RM, a static task assignment and partitioned scheduling algorithm to schedule super-TEEs, alongside other real-time tasks, on multicore systems. Experimental results on a Raspberry Pi 3B, further confirmed by simulations, show that ct-RM outperforms the state-of-the-art technique in terms of usable utilization by 12% on average and up to 27%.