ARM TrustZone is the de-facto hardware TEE implementation on mobile devices like smartphones. As a vendor-centric TEE, TrustZone greatly overlooks the strong protection demands and requirements from the App developers. Several security solutions have been proposed to enable the TEE-assisted isolation in the Normal World of ARM, attempting to balance the security and usability. However, they are still not full-fledged in serving Apps' needs. In this paper, we introduce LEAP, which is a lightweight App developer Centric TEE solution in the Normal World. LEAP offers the auto DevOps tool to help developers to prepare the codes running on it, enables isolated codes to execute in parallel and access peripheral (e.g. mobile GPUs) with ease, and dynamically manage system resources upon Apps' requests. We implement the LEAP prototype on the off-the-shelf ARM platform without any hardware change. We perform the comprehensive analyses and experiments to demonstrate that LEAP is efficient in design, comprehensive in support, and convenient in adoption.
翻译：ARM TrustZone 是在智能手机等移动设备上实际安装的硬硬件TEEE 。 作为以供应商为中心的TEE, TrustZone 大大忽略了App开发商的强烈保护需求和要求。 已经提出了几种安全解决方案,以使在ARM正常世界中的TEE协助隔离能够平衡安全性和可用性。 但是,这些解决方案在满足Apps的需要方面还没有完全成熟。 在本文件中,我们引入了LEAP, 这是一种在正常世界中的轻量级App开发器 Centric TEE 解决方案。 LEAP 提供了自动DevOps 工具, 帮助开发商准备正在运行的代码, 使得孤立的代码能够根据Apps的要求在平行和进入的外围(例如移动式GPU)实施, 方便地、 动态地管理系统资源。 我们实施了现成的ARM平台上的LEAP原型, 没有硬件的变化。 我们进行了全面的分析与实验, 以证明LEAP在设计上的效率、 支持性和方便性。
相关内容
微信扫码咨询专知VIP会员