CRII: CSR NeTS: Enabling Secure and Trusted Device I/Os on Smartphones

智能手机最近的成功很大程度上是由于集成了各种内置输入/输出(I/O)设备(例如触摸屏、传感器、摄像头和麦克风)，这些设备不仅允许用户与智能手机之间轻松交互，而且还支持大量有用的应用程序。然而，这些I/O设备如果被攻击者利用，可能会对智能手机用户构成严重的安全和隐私威胁。这些威胁的根本原因是智能手机设备I/O携带重要和敏感的用户信息，但目前缺乏系统的方法来保护这些设备I/O。这项研究将调查在智能手机上实现安全和可信的设备I/O的系统设计和原型实现。这个名为IOGuard的拟议系统将解决以下三个目标：1)保护设备输入：IOGuard旨在保护智能手机设备输入的安全，使攻击者无法从设备输入中推断或窃取用户敏感信息。2)支持可信设备输入：IOGuard旨在为受保护的应用程序提供设备输入可信且未被篡改的保证。3)提供可信的屏幕输出：IOGuard旨在为受保护的应用程序提供可信的屏幕输出，以防御UI欺骗/活动劫持攻击。本项目旨在以实用和可扩展的解决方案实现上述目标，该解决方案支持未经修改的智能手机操作系统和未经修改的应用程序，具有良好的系统性能和用户体验。具体地说，对未经修改的操作系统的支持将通过使用最近推出的ARM硬件虚拟化技术构建的小型专用裸机管理程序来实现。一个新的用户空间沙盒框架将实现对未修改应用程序的支持。还将进行一系列新颖的设计并进行评估，以实现顺利的系统集成和良好的系统性能。该项目将带来一个有效、实用且可部署扩展的解决方案，可使数十亿智能手机用户和许多移动服务受益。除了智能手机，其他具有丰富I/O设备集的智能移动设备也可以从这项研究的结果解决方案中受益。在该项目中获得的理解、见解和经验将对其他可以受益于虚拟化技术的移动计算领域非常有价值，例如移动云系统/应用程序和网络寻宝。

The recent success of smartphones is largely due to the integration of various built-in input/output (I/O) devices (e.g., touchscreens, sensors, cameras, and microphones), which not only permit easy interaction between users and smartphones, but also enable a plethora of useful applications. However, these I/O devices, if exploited by attackers, can pose severe security and privacy threats to smartphone users. The root cause of these threats is that smartphone device I/Os carry important and sensitive user information, but currently there lack systematic approaches to protect these device I/Os. This research will investigate the system design and prototype implementation towards enabling secure and trusted device I/Os on smartphones. This project will address the following three objectives with the proposed system, named IOGuard: 1) Securing device inputs: IOGuard aims to secure smartphone device inputs such that attackers cannot infer or steal user sensitive info from device inputs. 2) Enabling trusted device inputs: IOGuard aims to provide protected applications with the guarantee that the device inputs delivered to the applications are authentic and have not been tampered with. 3) Providing trusted screen outputs: IOGuard aims to enable trusted screen outputs for protected applications to defend against UI spoofing/activity hijacking attacks. This project aims at achieving the above objectives with practical and scalable solutions, which support running both unmodified smartphone operating systems and unmodified applications with good system performance and user experience. Specifically, support of unmodified operating systems will be achieved by a small and dedicated bare-metal hypervisor built using the recently introduced ARM hardware virtualization technology. Support of unmodified applications will be achieved by a novel user-space sandbox framework. A series of novel designs will also be carried out and evaluated to enable smooth system integration and good system performance. This project will bring an effective, practical, and deployment-scalable solution that could benefit billions of smartphone users and many mobile services. Besides smartphones, other smart mobile devices that feature a rich set of I/O devices can also benefit from the resulted solution of this research. The understandings, insights, and experiences gained in this project will be extremely valuable to other mobile computing fields that can be benefited from virtualization technologies, such as mobile cloud systems/applications and cyber-foraging.