Abstract:PDF HTML XML Export Cite reminder Refinement-based Modeling and Formal Verification for Multiple Secure Partitions of TrustZone DOI: 10.21655/ijsi.1673-7288.00301 Author: Affiliation: Clc Number: Fund Project: Article | Figures | Metrics | Reference | Related | Cited by | Materials | Comments Abstract:As a trusted execution environment technology on ARM processors, TrustZone provides an isolated and independent execution environment for security-sensitive programs and data on the device. However, running the trusted OS and all the trusted applications in the same environment may cause problems---The exploitation of vulnerabilities on any component may affect the others in the system. Although ARM proposed the S-EL2 virtualization technology, which supports multiple isolated partitions in the secure world to alleviate this problem, there may still be security threats such as information leakage between partitions in the real-world partition manager. Current secure partition manager designs and implementations lack rigorous mathematical proofs to guarantee the security of isolated partitions. This study analyzes the multiple secure partitions architecture of ARM TrustZone in detail, proposes a refinement-based modeling and security analysis method for multiple secure partitions of TrustZone, and completes the modeling and formal verification of the secure partition manager in the theorem prover Isabelle/HOL. First, we build a multiple secure partitions model named RMTEE based on refinement: an abstract state machine is used to describe the system running process and security policy requirements, forming the abstract model. Then the abstract model is instantiated into the concrete model, in which the event specification is implemented following the FF-A specification. Second, to address the problem that the existing partition manager design cannot meet the goal of information flow security verification, we design a DAC-based inter-partition communication access control and apply it to the modeling and verification of RMTEE. Lastly, we prove the refinement between the concrete model and the abstract model, and the correctness and security of the event specification in the concrete model. The formalization and verification consist of 137 definitions and 201 lemmas (more than 11,000 lines of Isabelle/HOL code). The results show that the model satisfies confidentiality and integrity, and can effectively defend against malicious attacks on partitions. Reference Related Cited by

A Separated Domain-Based Kernel Model for Trusted Computing

Trusted Terminal Design of Distributed Environment

Study on Terminal Trusted Model Based on Trusted Computing

Trusted Computing Base Using Virtualization Platform

Trusted Computing Model Based on Server-End Storage

SABDTM: Security-first Architecture-Based Dynamic Trusted Measurement Scheme for Operating System of The Virtual Computing Node

Layered and Separated Operating System Kernel

Study of Trustworthiness Measurement and Kernel Modules Accessing Address Space of Any Process.

Securing Monolithic Kernels using Compartmentalization

Microkernel Mechanisms for Improving the Trustworthiness of Commodity Hardware

One-Way Isolation Execution Model Based on Hardware Virtualization

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

A Secure Trust Model for P2P Systems Based on Trusted Computing

Trusted computing theory and technology in innovation-driven development

Trusted Computing-Based Security Model for Software Protection

An Active Trusted Model for Virtual Machine Systems

CCxTrust: Confidential Computing Platform Based on TEE and TPM Collaborative Trust

Refinement-based Modeling and Formal Verification for Multiple Secure Partitions of TrustZone.

Towards Trust Proof for Secure Confidential Virtual Machines

TeTPCM: Building Endogenous Trusted Computing on Trusted Execution Environment

TrustOSV: Building Trustworthy Executing Environment with Commodity Hardware for a Safe Cloud.