2019 · 49 citations · 28 references
ComputingComputer SystemsCybersecurityComputer SecurityMobile SecurityVirtualizationApplication Security ArchitectureApplication VirtualizationMobile Application DevelopmentMobile Device SecurityMobile VirtualizationAttack Surface DiscoveryExecution EnvironmentSecure Mobile Application DevelopmentTrusted Execution Environment SecurityTrusted Execution Environment VirtualizationTrusted Execution EnvironmentsTrusted SystemsVirtualized Mobile Platforms
Trusted Execution Environments (TEE) are widely deployed, especially on smartphones. A recent trend in TEE development is the transition from vendor-controlled, single-purpose TEEs to open TEEs that host Trusted Applications (TAs) from multiple sources with independent tasks. This transition is expected to create a TA ecosystem needed for providing stronger and customized security to apps and OS running in the Rich Execution Environment (REE). However, the transition also poses two security challenges: enlarged attack surface resulted from the increased complexity of TAs and TEEs; the lack of trust (or isolation) among TAs and the TEE.
28
2017 USENIX Annual Technical Conference (USENIX ATC'17)
Do Le Quoc, Martin S. Beck, Pramod Bhatotia et al. · 2017 · 3.1K citations
Meltdown: reading kernel memory from user space
Moritz Lipp, Michael Schwarz, Daniel Gruss et al. · USENIX Security Symposium · 2018 · 645 citations
Arvind Seshadri, Mark Luk, Ning Qu et al. · 2007 · 632 citations
Xiaoxin Chen, Tal Garfinkel, E. Christopher Lewis et al. · 2008 · 420 citations
Fengzhe Zhang, Jin Chen, Haibo Chen et al. · 2011 · 372 citations