LightArmor: A Lightweight Trusted Operating System Isolation Approach for Mobile Systems

1. Common vulnerabilities and exposures. https://cve.mitre.org/cve/search_cve_list.html

2. Danial, A.: Cloc. https://github.com/AlDanial/cloc

3. Azab, A.M., et al.: Hypervision across worlds: real-time kernel protection from the arm trustzone secure world. In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pp. 90–102 (2014)

   Google Scholar 

4. Azab, A.M., et al.: SKEE: a lightweight secure kernel-level execution environment for arm. In: NDSS, vol. 16, pp. 21–24 (2016)

   Google Scholar 

5. Babchuk, V.: optee: enable dynamic SHM support. https://patchwork.kernel.org/project/linux-arm-kernel/patch/1506621851-6929-13-git-send-email-volodymyr_babchuk@epam.com/ (2017)

6. Beniamini, G.: Trustzone kernel privilege escalation (CVE-2016-2431). http://bits-please.blogspot.com/2016/06/trustzone-kernel-privilege-escalation.html (2016)

7. Brasser, F., Gens, D., Jauernig, P., Sadeghi, A.R., Stapf, E.: Sanctuary: arming trustzone with user-space enclaves. In: NDSS (2019)

   Google Scholar 

8. Cerdeira, D., Martins, J., Santos, N., Pinto, S.: \(\{\)ReZone\(\}\): disarming \(\{\)TrustZone\(\}\) with \(\{\)TEE\(\}\) privilege reduction. In: USENIX Security (2022)

   Google Scholar 

9. Cerdeira, D., Santos, N., Fonseca, P., Pinto, S.: SoK: understanding the prevailing security vulnerabilities in trustzone-assisted tee systems. In: S &P (2020)

   Google Scholar 

10. Cho, Y., Kwon, D., Yi, H., Paek, Y.: Dynamic virtual address range adjustment for intra-level privilege separation on arm. In: NDSS (2017)

    Google Scholar 

11. Cho, Y., Shin, J., Kwon, D., Ham, M., Kim, Y., Paek, Y.: \(\{\)Hardware-Assisted\(\}\)\(\{\)On-Demand\(\}\) hypervisor activation for efficient security critical code execution on mobile devices. In: 2016 USENIX Annual Technical Conference (USENIX ATC 2016), pp. 565–578 (2016)

    Google Scholar 

12. Dautenhahn, N., Kasampalis, T., Dietz, W., Criswell, J., Adve, V.: Nested kernel: an operating system architecture for intra-kernel privilege separation. In: Proceedings of the Twentieth International Conference on Architectural Support for Programming Languages and Operating Systems, pp. 191–206 (2015)

    Google Scholar 

13. Nascimento, E.: Cache side-channel attack AES (2017). https://github.com/enascimento/cache_side-channel_attack_aes

14. Evenchick, E.: Rustzone: writing trusted applications in rust (2018). https://github.com/ericevenchick/rustzone

15. Guilbon, C.: Attacking the arm’s trustzone (2018). https://blog.quarkslab.com/attacking-the-arms-trustzone.html

16. Hua, Z., Gu, J., Xia, Y., Chen, H., Zang, B., Guan, H.: \(\{\)vTZ\(\}\): virtualizing \(\{\)ARM\(\}\)\(\{\)TrustZone\(\}\). In: 26th USENIX Security Symposium (USENIX Security 2017), pp. 541–556 (2017)

    Google Scholar 

17. Jang, J., et al.: PrivateZone: providing a private execution environment using arm TrustZone. IEEE Trans. Dependable Secure Comput. 15(5), 797–810 (2016)

    Article  MathSciNet  Google Scholar 

18. Kim, Y., Imani, M., Patil, S., Rosing, T.S.: CAUSE: critical application usage-aware memory system using non-volatile memory for mobile devices. In: 2015 IEEE/ACM International Conference on Computer-Aided Design (ICCAD), pp. 690–696. IEEE (2015)

    Google Scholar 

19. Kwon, D., Seo, J., Cho, Y., Lee, B., Paek, Y.: PrOS: light-weight privatized se cure OSes in arm trustzone. IEEE Trans. Mob. Comput. 19(6), 1434–1447 (2019)

    Article  Google Scholar 

20. laginimaineb: Extracting qualcomm’s keymaster keys (2016). https://bits-please.blogspot.com/2016/06/extracting-qualcomms-keymaster-keys.html

21. laginimaineb: War of the worlds - hijacking the Linux kernel from QSEE (2016). https://bits-please.blogspot.com/2016/05/war-of-worlds-hijacking-linux-kernel.html

22. Li, W., Xia, Y., Lu, L., Chen, H., Zang, B.: TEEv: virtualizing trusted execution environments on mobile platforms. In: Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments, pp. 2–16 (2019)

    Google Scholar 

23. Linaro: OP-TEE TOS. https://github.com/OP-TEE/optee_os

24. Linaro: OP-TEE Xtest framework (2016). https://github.com/OP-TEE/optee_test

25. Osvik, D.A., Shamir, A., Tromer, E.: Cache attacks and countermeasures: the case of AES. In: Pointcheval, D. (ed.) CT-RSA 2006. LNCS, vol. 3860, pp. 1–20. Springer, Heidelberg (2006). https://doi.org/10.1007/11605805_1

    Chapter  Google Scholar 

26. riscure: Breaking tee security part 3: escalating privileges. https://www.riscure.com/blog/tee-security-samsung-teegris-part-3/

27. Shen, D.: Attacking your trusted core (2015). https://www.blackhat.com/docs/us-15/materials/us-15-Shen-Attacking-Your-Trusted-Core-Exploiting-Trustzone-On-Android.pdf

28. Sun, H., Sun, K., Wang, Y., Jing, J., Wang, H.: TrustICE: hardware-assisted isolated computing environments on mobile devices. In: 2015 45th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, pp. 367–378. IEEE (2015)

    Google Scholar 

29. Wan, S., Sun, M., Sun, K., Zhang, N., He, X.: RusTEE: developing memory-safe ARM TrustZone applications. In: Annual Computer Security Applications Conference, pp. 442–453 (2020)

    Google Scholar 

30. Yarom, Y., Falkner, K.: \(\{\)FLUSH+ RELOAD\(\}\): a high resolution, low noise, L3 cache \(\{\)Side-Channel\(\}\) attack. In: USENIX security (2014)

    Google Scholar 

31. Zhao, S., Zhang, Q., Qin, Y., Feng, W., Feng, D.: SecTEE: a software-based approach to secure enclave architecture using tee. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (2019)

    Google Scholar 

32. Zhou, Q., Jia, X., Jiang, N.: Protecting virtual machines against untrusted hypervisor on ARM64 cloud platform. In: ICC (2022)

    Google Scholar 

33. Zhou, Q., Jia, X., Zhang, S., Jiang, N., Chen, J., Zhang, W.: SecFortress: securing hypervisor using cross-layer isolation. In: IPDPS (2022)

    Google Scholar 

Download references