Abstract:ABSTRACTMobile and embedded system software designer are often torn between choosing security and functionality. In particular, the security of out-of-band execution environment is sensitive to rich functionality. ARM TrustZone has been used to develop a Trusted Execution Environment (TEE), which runs in parallel with rich functionality commodity OS and provides an isolated and tamper-resistant execution context for trusted applications. ARM TrustZone splits access of the processor, memory and peripherals into two different worlds, namely normal world and secure world. The secure world is more privileged and the recommended context to implement TEE. However, despite the security of TrustZone TEE, the functionality is very limited. Hardware virtualization could balance the tradeoff between security and functionality by creating two VMes atop of the hardware. However, most of embedded and mobile devices lack hardware virtualization support, which makes it hard to deploy. Red-green dual-OS design, which provides a highly-protected and constrained trusted environment ("green" OS) to perform secure sensitive tasks and a general purpose environment ("red" OS) for all other tasks and applications, is an attractive design to achieve both security and functionality. Red-green dual-OS architecture uses resources partition instead of virtualization to achieve its goal and has been deployed in many mobile devices by running the red OS in normal world and the green OS in secure world of ARM TrustZone. However, even red-green dual-OS provides an isolated environment and rich functionality, the two OSes are not created equally: a compromise of the green OS would also result in the compromise of the red OS since secure world is more privileged. We show that how TVisor, a lightweight dual-OS architecture that creates two born-equal OS and each of them could still use the secure services of TEE in secure world, balances security and functionality for mobile devices. TVisor could be deployed to many low-cost embedded and mobile devices which are equipped with ARM TrustZone but without hardware virtualization support.

App Developer Centric Trusted Execution Environment.

App Developer Centric Trusted Execution Environment

LEAP: TrustZone Based Developer-Friendly TEE for Intelligent Mobile Apps

Dtee: A Declarative Approach to Secure IoT Applications Using TrustZone

Armlock: Hardware-Based Fault Isolation For Arm

Research on ARM TrustZone

TEEv: Virtualizing Trusted Execution Environments on Mobile Platforms

Vtz: Virtualizing ARM TrustZone.

TEEp: Supporting Secure Parallel Processing in ARM TrustZone.

It's TEEtime: A New Architecture Bringing Sovereignty to Smartphones

A Design and Verification Methodology for a TrustZone Trusted Execution Environment

MicroTEE: Designing TEE OS Based on the Microkernel Architecture

CacheIEE: Cache-Assisted Isolated Execution Environment on ARM Multi-Core Platforms

MIPE: a Practical Memory Integrity Protection Method in a Trusted Execution Environment.

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

Unified Enclave Abstraction and Secure Enclave Migration on Heterogeneous Security Architectures

TEEI - A Mobile Security Infrastructure for TEE Integration

Poster: TVisor - A Practical and Lightweight Mobile Red-Green Dual-OS Architecture.

Enhancement of Permission Management for an ARM-Android Platform.

HyperEnclave: an Open and Cross-platform Trusted Execution Environment

Keystone: An Open Framework for Architecting TEEs