uTango: An Open-Source TEE for IoT Devices

Abstract

Security is one of the main challenges of the Internet of Things (IoT). IoT devices are mainly powered by low-cost microcontrollers (MCUs) that typically lack basic hardware security mechanisms to separate security-critical applications from less critical components. Recently, Arm has started to release Cortex-M MCUs enhanced with TrustZone technology (i.e., TrustZone-M), a system-wide security solution aiming at providing robust protection for IoT devices. Trusted Execution Environments (TEEs) relying on TrustZone hardware have been perceived as safe havens for securing mobile devices. However, for the past few years, considerable effort has gone into unveiling hundreds of vulnerabilities and proposing a collection of relevant defense techniques to address several issues. While new TEE solutions built on TrustZone-M start flourishing, the lessons gathered from the research community appear to be falling short, as these new systems are trapping into the same pitfalls of the past. In this paper, we present uTango, the first multi-world TEE for modern IoT devices. uTango proposes a novel architecture aiming at tackling the major architectural deficiencies currently affecting TrustZone(-M)-assisted TEEs. In particular, we leverage the very same TrustZone hardware primitives used by dual-world implementations to create multiple and equally secure execution environments within the normal world. We demonstrate the benefits of uTango by conducting an extensive evaluation on a real TrustZone-M hardware platform, i.e., Arm Musca-B1. uTango will be open-sourced and freely available on GitHub in hopes of engaging academia and industry on securing the foreseeable trillion IoT devices.

Decentral and Incentivized Federated Learning Frameworks: A Systematic Literature Review

“…Yet reward systems based on such simplified assumptions may not be applicable in any real-world scenario as the dominant strategy for an individual-rational agent is dishonest behavior (e.g., reporting the best possible outcome without costly model training). Recent technologies, such as TEE and ZK-SNARKs are promising for trusted computation on mobile, edge, and IoT devices [110]. However, how to leverage them to achieve honest reports without incurring additional costs (e.g., computational costs) is an open question.…”

Strengthening Privacy and Data Security in Biomedical Microelectromechanical Systems by IoT Communication Security and Protection in Smart Healthcare

“…Integrating attack-resistant design principles into BioMEMS architecture fortifies their resilience against various attack vectors. Implementing hardware-based security modules, such as Trusted Platform Modules (TPM) [22] ,Trusted Execution Environments (TEEs) [23] or SGX enclaves [24], can shield critical operations and sensitive data from external tampering. Solutions like uTango [23] serve as evidence of the effectiveness of hardware-based isolation mechanisms in mitigating the potential impact of security breaches.…”

On Monetizing Personal Wearable Devices Data: A Blockchain-based Marketplace for Data Crowdsourcing and Federated Machine Learning in Healthcare

“…In our design, we use an ARM Cortex-M23 series processor [44] using TrustZone-M, which has been widely used in IoT devices [45] and is currently listed as a small and energy-efficient processor suitable for wearable devices. Data owners' activities are processed within the TEE, and the data are attested using the TEE's private key ρ = SIG(data,pk tee ) where SIG is the signing function and ρ is the attestation.…”