VButton

Li, Wenhao; Luo, Shiyu; Sun, Zhichuang; Xia, Yubin; Lu, Long; Chen, Haibo; Zang, Binyu; Guan, Haibing

doi:10.1145/3210240.3210330

Cited by 19 publications

(7 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although we cannot do apples-to-apples comparisons, our TCB size is comparable to previous systems that have used OP-TEE for their implementation. For example, VButton [34] reports additional 1.3K, TrustTokenF [69] reports additional 4.5K, and TruZ-View [68] reports additional 3.4K.…”

Section: Tcb Sizementioning

confidence: 99%

“…The normal world can only access its own memory regions and the buffer memory regions shared between the normal world and the secure world for passing image data and arguments. Confidentiality of User Input: Previous UI protection schemes [2,34,36,68] protect not only UI elements but also user input. However, Rushmore only focuses on securing images and does not provide user input security.…”

Section: Security Analysismentioning

confidence: 99%

“…We review related work in three categories: (1) image protection, (2) visual cryptography, and (3) TrustZone research. Image Protection: For general image protection, previous research was proposed for input image protection [1,29,48], physical attack protection [5], and UI protection using TrustZone [34,36,68]. Solutions for input image protection [1,29,48] first detect and recognize a confidential image from a camera frame, and then protect the image by occluding it from the camera frame.…”

Section: Related Workmentioning

confidence: 99%

“…In contrast, Rushmore's goal is to protect images against software running in the normal world of a device. UI protection solutions using Trust-Zone [34,36,68] also provide output image protection by providing a technique to securely display pixels. Using the main display channel (the frame buffer), they display the image of a UI element in the secure world and restrict access to the frame buffer for a short period of time until user actions are done with the UI.…”

Section: Related Workmentioning

confidence: 99%

See 3 more Smart Citations

Rushmore

Park

Kim

Sidhwani

et al. 2021

Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services

View full text Add to dashboard Cite

We present Rushmore, a system that securely displays static or animated images using TrustZone. The core functionality of Rushmore is to securely decrypt and display encrypted images (sent by a trusted party) on a mobile device. Although previous approaches have shown that it is possible to securely display encrypted images using TrustZone, they exhibit a critical limitation that significantly hampers the applicability of using TrustZone for display security. The limitation is that, when the trusted domain of TrustZone (the secure world) takes control of the display, the untrusted domain (the normal world) cannot display anything simultaneously. This limitation comes from the fact that previous approaches give the secure world exclusive access to the display hardware to preserve security. With Rushmore, we overcome this limitation by leveraging a well-known, yet overlooked hardware feature called an IPU (Image Processing Unit) that provides multiple display channels. By partitioning these channels across the normal world and the secure world, we enable the two worlds to simultaneously display pixels on the screen without sacrificing security. Furthermore, we show that with the right type of cryptographic method, we can decrypt and display encrypted animated images at 30 FPS or higher for mediumto-small images and at around 30 FPS for large images. One notable cryptographic method we adapt for Rushmore is visual cryptography, and we demonstrate that it is a light-weight alternative to other cryptographic methods for certain use cases. Our evaluation shows that in addition to providing usable frame rates, Rushmore incurs less than 5% overhead to the applications running in the normal world. CCS CONCEPTS• Security and privacy → Mobile platform security; Trusted computing.

show abstract

Section: Tcb Sizementioning

confidence: 99%

Section: Security Analysismentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 2 more Smart Citations

Rushmore

Park

Kim

Sidhwani

et al. 2021

Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services

View full text Add to dashboard Cite

show abstract

“…For instance, in Section 6.6 we will see that solutions such as the TrustPay design are vulnerable to man-in-the-mobile attacks even though it uses a TEE, because isolation is only the first step; integrity and authenticity of the transaction are equally important. Similarly, we will also discuss the weaknesses of VButton [25] design that result from the lack of a Trusted UI indicator.…”

Section: Separating the Factorsmentioning

confidence: 99%

SecurePay: Strengthening Two-Factor Authentication for Arbitrary Transactions

Konoth

Fischer

Fokkink

et al. 2020

2020 IEEE European Symposium on Security and Privacy (EuroS&P)

View full text Add to dashboard Cite

General rightsCopyright and moral rights for the publications made accessible in the public portal are retained by the authors and/or other copyright owners and it is a condition of accessing publications that users recognise and abide by the legal requirements associated with these rights.• Users may download and print one copy of any publication from the public portal for the purpose of private study or research. • You may not further distribute the material or use it for any profit-making activity or commercial gain • You may freely distribute the URL identifying the publication in the public portal Take down policyIf you believe that this document breaches copyright please contact us providing details, and we will remove access to the work immediately and investigate your claim.

show abstract