RusTEE: Developing Memory-Safe ARM TrustZone Applications
Shengye Wan, Mingshen Sun, Kun Sun, Ning Zhang, Xu He
Abstract
In the past decade, Trusted Execution Environment (TEE) provided by ARM TrustZone is becoming one of the primary techniques for enhancing the security of mobile devices. The isolation enforced by TrustZone can protect the trusted applications running in the TEE against malicious software in the untrusted rich execution environment (REE). However, TrustZone cannot completely prevent vulnerabilities in trusted applications residing in the TEE, which can then be used to attack other trusted applications or even the trusted OS. Previously, a number of memory corruption vulnerabilities have been reported on different TAs, which are written in memory-unsafe languages like C.
Topics & Concepts
Computer scienceOperating systemComputer securityIsolation (microbiology)SoftwareEmbedded systemMobile deviceARM architectureMicrobiologyBiologySecurity and Verification in ComputingCloud Data Security SolutionsDistributed systems and fault tolerance