[en] With the advent of the Internet of Things (IoT) paradigm, computing and networking capabilities are extending to devices that are not considered as computers, enabling them to interact with the physical world or other software entities with minimal or no human input. This fast abstract proposes a methodology for the security assessment of software based on TrustZone-M, the ARM hardware security extension for microcontrollers. The methodology consists of the exploitation of a verification and validation framework to automatically test TrustZone-M based software.
Disciplines :
Sciences informatiques
Auteur, co-auteur :
IANNILLO, Antonio Ken ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
STATE, Radu ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
Co-auteurs externes :
no
Langue du document :
Anglais
Titre :
A Proposal for Security Assessment of Trustzone-M based Software
Date de publication/diffusion :
2019
Nom de la manifestation :
2019 IEEE 30th International Symposium on Software Reliability Engineering (ISSRE)
Date de la manifestation :
from 28-10-2019 to 31-10-2019
Titre de l'ouvrage principal :
2019 IEEE 30th International Symposium on Software Reliability Engineering (ISSRE)
Peer reviewed :
Peer reviewed
Focus Area :
Security, Reliability and Trust
Projet européen :
H2020 - 830927 - CONCORDIA - Cyber security cOmpeteNCe fOr Research anD InnovAtion
T. Alves, "Trustzone: Integrated hardware and software security, " White paper, 2004.
A. ARM, "Security technology building a secure system using trustzone technology (white paper), " ARM Limited, 2009.
P. Sparks, "The route to a trillion devices, " White Paper, ARM, 2017.
TrustZone technology for ARMv8-M Atchitecture, ARM, 2017.
A. Machiry, E. Gustafson, C. Spensky, C. Salls, N. Stephens, R. Wang, A. Bianchi, Y. R. Choe, C. Kruegel, and G. Vigna, "BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments, " in Proceedings 2017 Network and Distributed System Security Symposium, 2017.
T. Nyman, J.-E. Ekberg, L. Davi, and N. Asokan, "Cfi care: Hardwaresupported call and return enforcement for commercial microcontrollers, " in International Symposium on Research in Attacks, Intrusions, and Defenses. Springer, 2017, pp. 259-284.
N. Asokan, T. Nyman, N. Rattanavipanon, A.-R. Sadeghi, and G. Tsudik, "Assured: Architecture for secure software update of realistic embedded devices, " IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, vol. 37, no. 11, pp. 2290-2300, 2018.
