A trustenclave-based architecture for ensuring run-time security in embedded terminals

Chang, Ruijie; Jiang, Liehui; Chen, Wenzhi; Xie, Yaobin; Lu, Zhongyong

doi:10.23919/tst.2017.8030534

Cited by 5 publications

(5 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Framework for development of trusted IoT applications C-FLAT: Control-Flow Attestation for Embedded Systems Software [37] 2016 Attestation for the application execution path without requiring the source code Remote Attestation for Embedded Systems [38] 2016 Implementation of Trusted Platform Module (TPM) with ARM processor CaSE: Cache-Assisted Secure Execution on ARM Processors [39] 2016 Cache-assisted protection against multi-vector attacks and memory disclosure A trust enclave-based architecture for ensuring run-time security in embedded terminals [19] 2017…”

Section: General Resultsmentioning

confidence: 99%

“…Content may change prior to final publication. Protection for legacy applications [8] Access control between trusted and untrusted worlds [23] Protection for embedded devices [33] Hardware isolation architecture [41] Protection for applications execution [34] General-purpose trusted computing platform [27] Protection for real-time OS [43] Trusted OS [29] Protection against data leakage [70] Memory dump mechanism [30] Protection for memory integrity [45] Cache-assisted secure execution [39] Protection for legacy applications [48] Runtime security architecture [19] Protection for services [72] Kernel protection mechanism [51] Protection for SoC communication bus [66] TCB measurements management [42] Trusted I/O [74] Hypervisor [57] Secure device access method [26] Secure mobile device framework [54] TABLE 10. Application solution proposals…”

Section: Tee Advantages and Disadvantagesmentioning

confidence: 99%

“…Since TPMs do not allow third parties to run code inside them, TEE was proposed to provide an isolated and protected execution environment for third-parties applications. TEE secure characteristics include isolated code execution and integrity of the runtime code, execution files, and control flow [19]. It maintains the confidentiality of data and code even when under a machine physical control attack.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Systematic Literature Review on the Use of Trusted Execution Environments to Protect Cloud/Fog-Based Internet of Things Applications

et al. 2021

View full text Add to dashboard Cite

Trusted Execution Environments have been applied to improve data security in many distinct application scenarios since they enable data processing in a separate and protected region of memory. To investigate how this technology has been applied to the different IoT scenarios, which commonly deal with specific characteristics such as device resource constraints, we carried out a systematic literature review. For this, we selected and analyzed 58 papers from different conferences and journals, identifying the main IoT solutions and scenarios in which TEE has been employed. We also gathered the mentioned TEE advantages and disadvantages as well as the suggestions for future works. This study gives a general overview of the use of TEEs for cloud/fog-based IoT applications, bringing some challenges and directions.

show abstract

Section: General Resultsmentioning

confidence: 99%

Section: Tee Advantages and Disadvantagesmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Systematic Literature Review on the Use of Trusted Execution Environments to Protect Cloud/Fog-Based Internet of Things Applications

et al. 2021

View full text Add to dashboard Cite

show abstract

“…However, all these are reactive countermeasures and they cannot deal with next‐generation unknown threats. Trusted computing has been proposed to harden cybersecurity defence of embedded terminal for industrial applications [10]. Since only the authorised software can operate, it enforces specific behaviours and protects the system against unauthorised changes and attacks such as malware and root kits.…”

Section: Introductionmentioning

confidence: 99%

Review on GPS spoofing‐based time synchronisation attack on power system

Zhang

Peng

Liu

et al. 2020

IET Generation, Transmission & Distribution

View full text Add to dashboard Cite

“…Enclave’s security boundary contains only the CPU and itself. In theory, SGX can be widely used in many ways [ 25 , 26 ]; a significant usage is to prevent the compromised OS from attacking the software.…”

Section: Introductionmentioning

confidence: 99%

eTPM: A Trusted Cloud Platform Enclave TPM Scheme Based on Intel SGX Technology

Sun

Zhang

et al. 2018

Sensors

View full text Add to dashboard Cite

Today cloud computing is widely used in various industries. While benefiting from the services provided by the cloud, users are also faced with some security issues, such as information leakage and data tampering. Utilizing trusted computing technology to enhance the security mechanism, defined as trusted cloud, has become a hot research topic in cloud security. Currently, virtual TPM (vTPM) is commonly used in a trusted cloud to protect the integrity of the cloud environment. However, the existing vTPM scheme lacks protections of vTPM itself at a runtime environment. This paper proposed a novel scheme, which designed a new trusted cloud platform security component, ‘enclave TPM (eTPM)’ to protect cloud and employed Intel SGX to enhance the security of eTPM. The eTPM is a software component that emulates TPM functions which build trust and security in cloud and runs in ‘enclave’, an isolation memory zone introduced by SGX. eTPM can ensure its security at runtime, and protect the integrity of Virtual Machines (VM) according to user-specific policies. Finally, a prototype for the eTPM scheme was implemented, and experiment manifested its effectiveness, security, and availability.

show abstract

A trustenclave-based architecture for ensuring run-time security in embedded terminals

Cited by 5 publications

References 0 publications

Systematic Literature Review on the Use of Trusted Execution Environments to Protect Cloud/Fog-Based Internet of Things Applications

Systematic Literature Review on the Use of Trusted Execution Environments to Protect Cloud/Fog-Based Internet of Things Applications

Review on GPS spoofing‐based time synchronisation attack on power system

eTPM: A Trusted Cloud Platform Enclave TPM Scheme Based on Intel SGX Technology

Contact Info

Product

Resources

About