A TEE-aware compartmentalization framework based on DSbD

通过这个项目，我们将帮助业界理解如何构建基于可信执行环境（TEE）的功能架构，该架构在安全和正常环境之间提供强大的隔离和安全的数据共享。作为一家公司，我们的产品需要这样做，但这个机会远远大于我们的行业（身份验证）。存在许多用例，例如在金融服务、企业和媒体中，以增强事务、数据和内容的安全性。有了这笔资金，我们的目标是通过研究基于TEE开发框架的能力架构，通过通过具有保证管道的隔离隔间控制对象功能内的数据流，实现跨安全和正常世界的系统资源和应用程序数据的强隔离和安全共享，从而研究一种可以缓解现有TEE所带来的当前漏洞的解决方案。我们是一家充满激情的AIOT中小企业，但安全是我们技术、定位和发展的基础。我们的首席技术官在tee领域做了很多工作。赢得这笔拨款将使我们能够把资源用于解决这个真正的市场问题。我们的愿景是，这项研究可以作为我们未来构建原型的基础，这不仅可以加强我们产品的安全性，还可以在激进化英国数字计算基础设施方面发挥我们的作用。使用FVP平台与CHERI处理器原型，CheriBSD内核，Clang/LLVM和CheriBSD的用户空间，我们的主要目标是：与现有标准TEE环境Intel SGX和ARM TrustZone相比，分区TEE的漏洞缓解和优点*了解这样的框架是否有助于简化开发和采用，以及是否支持硬件独立性*探索飞地生命周期管理我们将通过分离正常世界和安全世界功能之间的关注点来关注应用层分区。以及安全（飞地）世界中功能的进一步分解，包括具有具有单一职责原则和特权分离的独立隔间的模块化抽象。这是一种创新，因为它与DSbD技术一起工作，旨在将两个世界之间的关注点从硬件或操作系统堆栈中分离出来，同时保留TEE的完整性，但解决现有方法的漏洞。在完成这项研究之后，我们将努力构建一个原型框架，以便在内部进一步测试，并理想地与更广泛的软件和DSbD社区进行测试。

Through this project, we will contribute to our industry's understanding of how to build a capability architecture based Trusted Execution Environment (TEE) that provides strong isolation and secure data sharing across the secure and normal worlds. As a company, we require this for our products but the opportunity is much bigger than our sector alone (identity verification). Many use cases exist, for example in financial services, in enterprise and in media to enhance security around transactions, data and content.With this grant, our objective is to investigate a solution that could mitigate current vulnerabilities posed by existing TEEs, by researching a capability architecture based TEE development framework for strong isolation and secure sharing of systems resources and application data across secure and normal worlds by controlling dataflows within object capabilities via isolated compartments with assured pipelines.We are a passionate AIOT SME but security underpins our technology, our positioning and our growth. TEEs is an area our CTO has done a lot of work in. Winning this grant would allow us to put resource behind this real market problem. Our vision is that this research could be used as a basis for us to build a prototype in the future, which would strengthen not only our product's security, but also play our part in radicalising the UK's digital computing infrastructure.Using the FVP platform with CHERI processor prototype, CheriBSD kernel, Clang/LLVM and CheriBSD's userspace, our key objectives are to:* Investigate the performance, semantics, vulnerability mitigations and merits of compartmentalized TEE in comparison to existing standard TEE environments Intel SGX and ARM TrustZone TEE* Understand if a framework like this helps towards ease of development and adoption as well as knowing if it supports hardware independence* Explore enclave life cycle managementWe will focus on the application layer compartmentalization by separation of concerns between the normal world and secure world functions, and further decomposition of capabilities within the secure (enclave) world including modular abstraction with isolated compartments with single responsibility principles and the separation of privileges.This is innovative because working with DSbD technologies, it aims to move the separation of concerns between the two worlds away from the hardware or the OS stack while retaining the integrity of TEE but addressing the vulnerabilities of existing approaches.After completing this research, we endeavour to build a prototype framework for further testing internally, and ideally with the wider software and DSbD community.