SaTC: CORE: Small: Collaborative: Guarding the Integrity of Mobile Graphical User Interfaces

当今的移动的应用和服务经由图形用户界面（GUI）向用户显示信息。不幸的是，攻击者可能篡改该显示器，恶意地隐藏、改变或完全伪造显示内容。 提供信息的用户应用程序或云服务可能完全不知道篡改。 Android和iOS等移动的操作系统无法保证应用程序GUI内容的完整性和正确性。 该项目正在开发技术来保证安全敏感GUI区域的完整性和正确性，以确保用户在这些区域中看到的正是应用程序（或云服务）想要显示的内容。研究人员正在开发一个被称为“视口”的受保护GUI区域的概念，云后端可以将其与应用程序静态关联。其目的是确保只有应用程序的GUI能够显示到屏幕的指定部分。研究人员正在开发一个视口安全执行监视器，使用ARM处理器的硬件功能，并开发对视口的编程和操作系统支持。 该项目利用了硬件功能的协同作用，包括虚拟化、ARM TrustZone和支持覆盖层的现代显示控制器。最后，研究团队正在评估所提供的安全保证、性能开销和应用程序开发人员的易用性。

Today's mobile applications and services display information to the user via a Graphical User Interface (GUI). Unfortunately, an attacker may tamper with that display, maliciously hiding, altering, or entirely fabricating display contents. User apps or the cloud services providing the information may be entirely unaware of the tampering. Mobile operating systems, such as Android and iOS, cannot guarantee the integrity and correctness of the app GUI content. This project is developing techniques to guarantee the integrity and correctness of security-sensitive GUI regions, to ensure that what a user sees in those regions is exactly what the app (or cloud service) intends to display. The researchers are developing the concept of a protected GUI region called a "viewport," which a cloud backend may statically associate with an app. The intent is to ensure that only the GUI of the application is able to display into the specified portion of the screen. The researchers are developing a viewport security enforcement monitor, using hardware features of the ARM processor, and developing programming and operating system support for viewports. The project exploits a synergy of hardware features, including virtualization, ARM TrustZone, and modern display controller with support for overlaid layers. Finally, the research team is evaluating the security assurance provided, performance overhead, and ease of use by application developers.