Abstract:This paper presents an approach to provide strong assurance of the secure execution of distributed event-driven applications on shared infrastructures, while relying on a small Trusted Computing Base. We build upon and extend security primitives provided by Trusted Execution Environments (TEEs) to guarantee authenticity and integrity properties of applications, and to secure control of input and output devices. More specifically, we guarantee that if an output is produced by the application, it was allowed to be produced by the application's source code based on an authentic trace of inputs. We present an integrated open-source framework to develop, deploy, and use such applications across heterogeneous TEEs. Beyond authenticity and integrity, our framework optionally provides confidentiality and a notion of availability, and facilitates software development at a high level of abstraction over the platform-specific TEE layer. We support event-driven programming to develop distributed enclave applications in Rust and C for heterogeneous TEE, including Intel SGX, ARM TrustZone and Sancus. In this article we discuss the workings of our approach, the extensions we made to the Sancus processor, and the integration of our development model with commercial TEEs. Our evaluation of security and performance aspects show that TEEs, together with our programming model, form a basis for powerful security architectures for dependable systems in domains such as Industrial Control Systems and the Internet of Things, illustrating our framework's unique suitability for a broad range of use cases which combine cloud processing, mobile and edge devices, and lightweight sensing and actuation.

Is Your Access Allowed or Not? A Verified Tag-based Access Control Framework for the Multi-domain TEE

CVTEE: A Compatible Verified TEE Architecture With Enhanced Security

Lark: Verified Cross-Domain Access Control for Trusted Execution Environments

Dtee: A Declarative Approach to Secure IoT Applications Using TrustZone

Analysis for Real-time Intransitive Information Flow Security Properties

A Design and Verification Methodology for a TrustZone Trusted Execution Environment

Trusted isolation environment: an attestation architecture with usage control model

Fine-grained access control based on Trusted Execution Environment

HasTEE: Programming Trusted Execution Environments with Haskell

Understanding TEE Containers, Easy to Use? Hard to Trust

Formal Verification of Virtualization-Based Trusted Execution Environments

ProveriT: A Parameterized, Composable, and Verified Model of TEE Protection Profile

TEEI - A Mobile Security Infrastructure for TEE Integration

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

MIPE: a Practical Memory Integrity Protection Method in a Trusted Execution Environment.

Interface-Based Side Channel in TEE-Assisted Networked Services

Remote Credential Management with Mutual Attestation for Trusted Execution Environments

Decentralized Translator of Trust: Supporting Heterogeneous TEE for Critical Infrastructure Protection

End-to-End Security for Distributed Event-Driven Enclave Applications on Heterogeneous TEEs

A Last-Level Defense for Application Integrity and Confidentiality

SoK: TEE-Assisted Confidential Smart Contract