The Security of ARM TrustZone in a FPGA-Based SoC. Benhani, E. M., Bossuet, L., & Aubert, A. IEEE Transactions on Computers, 68(8):1238–1248, August, 2019. doi abstract bibtex Cybersecurity of embedded systems has become a major challenge for the development of the Internet of Things, of Cloud computing and other trendy applications without devoting a significant part of the design budget to industrial players. Technologies like TrustZone, provided by ARM, support a Trusted Execution Environment (TEE) software architecture and are inexpensive integrated solutions. While this technology allows isolation and secure execution of critical software applications (e.g., banking), recent preliminary works highlighted some security breaches or limitations when the ARM processors are embedded in a FPGA-based heterogeneous SoCs such as the Xilinx Zynq or Intel SoC FPGA devices. This paper highlights the security issue of such complex SoCs and details six efficient attacks on the ARM TrustZone extension in the SoC. A prototype system design on a Xilinx Zynq SoC is the target of the attacks presented in this paper but they could be adapted to other SoCs. This paper also includes recommendations and security solutions to design a trustworthy embedded system with a FPGA-based heterogeneous SoC.
@article{benhani_security_2019,
title = {The {Security} of {ARM} {TrustZone} in a {FPGA}-{Based} {SoC}},
volume = {68},
issn = {0018-9340},
doi = {10.1109/TC.2019.2900235},
abstract = {Cybersecurity of embedded systems has become a major challenge for the development of the Internet of Things, of Cloud computing and other trendy applications without devoting a significant part of the design budget to industrial players. Technologies like TrustZone, provided by ARM, support a Trusted Execution Environment (TEE) software architecture and are inexpensive integrated solutions. While this technology allows isolation and secure execution of critical software applications (e.g., banking), recent preliminary works highlighted some security breaches or limitations when the ARM processors are embedded in a FPGA-based heterogeneous SoCs such as the Xilinx Zynq or Intel SoC FPGA devices. This paper highlights the security issue of such complex SoCs and details six efficient attacks on the ARM TrustZone extension in the SoC. A prototype system design on a Xilinx Zynq SoC is the target of the attacks presented in this paper but they could be adapted to other SoCs. This paper also includes recommendations and security solutions to design a trustworthy embedded system with a FPGA-based heterogeneous SoC.},
number = {8},
journal = {IEEE Transactions on Computers},
author = {Benhani, E. M. and Bossuet, L. and Aubert, A.},
month = aug,
year = {2019},
keywords = {ARM TrustZone, ARM TrustZone extension, ARM processors, FPGA Security, FPGA-based heterogeneous SoC, Fabrics, Field programmable gate arrays, Hardware, IP networks, Intel SoC FPGA devices, Internet of Things, Program processors, Security, TEE software architecture, Xilinx Zynq SoC, cloud computing, embedded system design, embedded systems, field programmable gate arrays, security issue, software architecture, system-on-chip, trusted computing, trusted execution environment, trustworthy embedded system},
pages = {1238--1248},
}
Downloads: 0
{"_id":"MbLz3fJQRoe3roxDL","bibbaseid":"benhani-bossuet-aubert-thesecurityofarmtrustzoneinafpgabasedsoc-2019","author_short":["Benhani, E. M.","Bossuet, L.","Aubert, A."],"bibdata":{"bibtype":"article","type":"article","title":"The Security of ARM TrustZone in a FPGA-Based SoC","volume":"68","issn":"0018-9340","doi":"10.1109/TC.2019.2900235","abstract":"Cybersecurity of embedded systems has become a major challenge for the development of the Internet of Things, of Cloud computing and other trendy applications without devoting a significant part of the design budget to industrial players. Technologies like TrustZone, provided by ARM, support a Trusted Execution Environment (TEE) software architecture and are inexpensive integrated solutions. While this technology allows isolation and secure execution of critical software applications (e.g., banking), recent preliminary works highlighted some security breaches or limitations when the ARM processors are embedded in a FPGA-based heterogeneous SoCs such as the Xilinx Zynq or Intel SoC FPGA devices. This paper highlights the security issue of such complex SoCs and details six efficient attacks on the ARM TrustZone extension in the SoC. A prototype system design on a Xilinx Zynq SoC is the target of the attacks presented in this paper but they could be adapted to other SoCs. This paper also includes recommendations and security solutions to design a trustworthy embedded system with a FPGA-based heterogeneous SoC.","number":"8","journal":"IEEE Transactions on Computers","author":[{"propositions":[],"lastnames":["Benhani"],"firstnames":["E.","M."],"suffixes":[]},{"propositions":[],"lastnames":["Bossuet"],"firstnames":["L."],"suffixes":[]},{"propositions":[],"lastnames":["Aubert"],"firstnames":["A."],"suffixes":[]}],"month":"August","year":"2019","keywords":"ARM TrustZone, ARM TrustZone extension, ARM processors, FPGA Security, FPGA-based heterogeneous SoC, Fabrics, Field programmable gate arrays, Hardware, IP networks, Intel SoC FPGA devices, Internet of Things, Program processors, Security, TEE software architecture, Xilinx Zynq SoC, cloud computing, embedded system design, embedded systems, field programmable gate arrays, security issue, software architecture, system-on-chip, trusted computing, trusted execution environment, trustworthy embedded system","pages":"1238–1248","bibtex":"@article{benhani_security_2019,\n\ttitle = {The {Security} of {ARM} {TrustZone} in a {FPGA}-{Based} {SoC}},\n\tvolume = {68},\n\tissn = {0018-9340},\n\tdoi = {10.1109/TC.2019.2900235},\n\tabstract = {Cybersecurity of embedded systems has become a major challenge for the development of the Internet of Things, of Cloud computing and other trendy applications without devoting a significant part of the design budget to industrial players. Technologies like TrustZone, provided by ARM, support a Trusted Execution Environment (TEE) software architecture and are inexpensive integrated solutions. While this technology allows isolation and secure execution of critical software applications (e.g., banking), recent preliminary works highlighted some security breaches or limitations when the ARM processors are embedded in a FPGA-based heterogeneous SoCs such as the Xilinx Zynq or Intel SoC FPGA devices. This paper highlights the security issue of such complex SoCs and details six efficient attacks on the ARM TrustZone extension in the SoC. A prototype system design on a Xilinx Zynq SoC is the target of the attacks presented in this paper but they could be adapted to other SoCs. This paper also includes recommendations and security solutions to design a trustworthy embedded system with a FPGA-based heterogeneous SoC.},\n\tnumber = {8},\n\tjournal = {IEEE Transactions on Computers},\n\tauthor = {Benhani, E. M. and Bossuet, L. and Aubert, A.},\n\tmonth = aug,\n\tyear = {2019},\n\tkeywords = {ARM TrustZone, ARM TrustZone extension, ARM processors, FPGA Security, FPGA-based heterogeneous SoC, Fabrics, Field programmable gate arrays, Hardware, IP networks, Intel SoC FPGA devices, Internet of Things, Program processors, Security, TEE software architecture, Xilinx Zynq SoC, cloud computing, embedded system design, embedded systems, field programmable gate arrays, security issue, software architecture, system-on-chip, trusted computing, trusted execution environment, trustworthy embedded system},\n\tpages = {1238--1248},\n}\n\n","author_short":["Benhani, E. M.","Bossuet, L.","Aubert, A."],"key":"benhani_security_2019","id":"benhani_security_2019","bibbaseid":"benhani-bossuet-aubert-thesecurityofarmtrustzoneinafpgabasedsoc-2019","role":"author","urls":{},"keyword":["ARM TrustZone","ARM TrustZone extension","ARM processors","FPGA Security","FPGA-based heterogeneous SoC","Fabrics","Field programmable gate arrays","Hardware","IP networks","Intel SoC FPGA devices","Internet of Things","Program processors","Security","TEE software architecture","Xilinx Zynq SoC","cloud computing","embedded system design","embedded systems","field programmable gate arrays","security issue","software architecture","system-on-chip","trusted computing","trusted execution environment","trustworthy embedded system"],"metadata":{"authorlinks":{}},"downloads":0,"html":""},"bibtype":"article","biburl":"https://bibbase.org/zotero/bxt101","dataSources":["Wsv2bQ4jPuc7qme8R"],"keywords":["arm trustzone","arm trustzone extension","arm processors","fpga security","fpga-based heterogeneous soc","fabrics","field programmable gate arrays","hardware","ip networks","intel soc fpga devices","internet of things","program processors","security","tee software architecture","xilinx zynq soc","cloud computing","embedded system design","embedded systems","field programmable gate arrays","security issue","software architecture","system-on-chip","trusted computing","trusted execution environment","trustworthy embedded system"],"search_terms":["security","arm","trustzone","fpga","based","soc","benhani","bossuet","aubert"],"title":"The Security of ARM TrustZone in a FPGA-Based SoC","year":2019}