XNPro: Low-impact hypervisor-based execution prevention on ARM

TrustED 2015 - Proceedings of the 5th International Workshop on Trustworthy Embedded Devices, co-located with CCS 2015

Volumn , Issue , 2015, Pages 55-64

  Nordholz, Jan ^a   Vetter, Julian ^a   Peter, Michael ^a   Junker Petschick, Matthias ^a   Danisevskis, Janis ^a  

^a TECHNISCHE UNIVERSITÄT BERLIN   (Germany)

Author keywords

ARM; Preventing Code Injection Attacks; Virtualization

Indexed keywords

ARM PROCESSORS; CODES (SYMBOLS); MOBILE DEVICES; VIRTUAL REALITY;

ARM CORTICES; BENCHMARK MEASUREMENTS; CODE INJECTION; CODE INJECTION ATTACKS; CONSTRAINED RESOURCES; MALWARE ATTACKS; RUN-TIME PERFORMANCE; VIRTUALIZATIONS;

MALWARE;

EID: 84958594618     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2808414.2808415     Document Type: Conference Paper

References (26)

1. Cubieboard2. http://cubieboard.org/model/cb2/. Accessed: 2014-10-07.
2. Tcg mobile trusted module specification. White Paper, June 2008.
3. ARM Security Technology - Building a Secure System using TrustZone Technology. Whitepaper, April 2009.
4. ARM Architecture Reference Manual. ARMv7-A and ARMv7-R edition. Whitepaper, July 2012.
5. T. Alves and D. Felton. Trustzone: Integrated hardware and software security-enabling trusted computing in embedded systems. white paper, arm, july 2004.
6. W. A. Arbaugh, D. J. Farber, and J. M. Smith. A secure and reliable bootstrap architecture. In In Proceedings of the 1997 IEEE Symposium on Security and Privacy, pages 65-71. IEEE Computer Society, 1997.
7. A. M. Azab, P. Ning, J. Shah, Q. Chen, R. Bhutkar, G. Ganesh, J. Ma, and W. Shen. Hypervision across worlds: Real-time kernel protection from the arm trustzone secure world. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, CCS '14, pages 90-102, New York, NY, USA, 2014. ACM.
8. C. Dall and J. Nieh. Kvm for arm. Available at http://systems.cs.columbia.edu/files/wpid-ols2010-kvmarm.pdf, accessed July 28th, 2015.
9. C. Dall and J. Nieh. Kvm/arm: the design and implementation of the linux arm hypervisor. ACM SIGARCH Computer Architecture News, 42(1):333-348, 2014.
10. J. Danisevskis, M. Peter, J. Nordholz, M. Petschick, and J. Vetter. Graphical user interface for virtualized mobile handsets. In IEEE S&P MoST, 2015.
11. K. Dietrich and J. Winter. Towards customizable, application specific mobile trusted modules. In Proceedings of the Fifth ACM Workshop on Scalable Trusted Computing, STC '10, pages 31-40, New York, NY, USA, 2010. ACM.
12. J.-H. Ding, C.-J. Lin, P.-H. Chang, C.-H. Tsang, W.-C. Hsu, and Y.-C. Chung. Armvisor: System virtualization for arm. In Proceedings of the Ottawa Linux Symposium (OLS), pages 93-107, 2012.
13. T. Frenzel, A. Lackorzynski, A. Warg, and H. Härtig. Arm trustzone as a virtualization technique in embedded systems. In Proceedings of Twelfth Real-Time Linux Workshop, Nairobi, Kenya, 2010.
14. X. Ge, H. Vijayakumar, and T. Jaeger. Sprobes: Enforcing kernel code integrity on the trustzone architecture. In Proceedings of the 3rd IEEE Mobile Security Technologies Workshop (MoST 2014), May 2014.
15. V. P. Kemerlis, M. Polychronakis, and A. D. Keromytis. ret2dir: Rethinking kernel isolation. In 23rd USENIX Security Symposium (USENIX Security 14), pages 957-972, San Diego, CA, Aug. 2014. USENIX Association.
16. V. P. Kemerlis, G. Portokalidis, and A. D. Keromytis. kguard: Lightweight kernel protection against return-to-user attacks. In Presented as part of the 21st USENIX Security Symposium (USENIX Security 12), pages 459-474, Bellevue, WA, 2012. USENIX.
17. A. Lackorzynski, A. Warg, and M. Peter. Virtual processors as kernel interface. In Twelfth Real-Time Linux Workshop, 2010.
18. J. McCune, Y. Li, N. Qu, Z. Zhou, A. Datta, V. Gligor, and A. Perrig. Trustvisor: Efficient tcb reduction and attestation. In Security and Privacy (SP), 2010 IEEE Symposium on, pages 143-158, May 2010.
19. L. W. McVoy, C. Staelin, et al lmbench: Portable tools for performance analysis. In USENIX annual technical conference, pages 279-294. San Diego, CA, USA, 1996.
20. R. Riley, X. Jiang, and D. Xu. Guest-transparent prevention of kernel rootkits with vmm-based memory shadowing. In Proceedings of the 11th International Symposium on Recent Advances in Intrusion Detection, RAID '08, pages 1-20, Berlin, Heidelberg, 2008. Springer-Verlag.
21. A. Seshadri, M. Luk, N. Qu, and A. Perrig. Secvisor: A tiny hypervisor to provide lifetime kernel code integrity for commodity oses. In Proceedings of Twenty-first ACM SIGOPS Symposium on Operating Systems Principles, SOSP '07, pages 335-350, New York, NY, USA, 2007. ACM.
22. H. Shacham. The geometry of innocent flesh on the bone: Return-into-libc without function calls (on the x86). In Proceedings of the 14th ACM Conference on Computer and Communications Security, CCS '07, pages 552-561, New York, NY, USA, 2007. ACM.
23. P. Varanasi and G. Heiser. Hardware-supported virtualization on arm. In Proceedings of the Second Asia-Pacific Workshop on Systems, page 11. ACM, 2011.
24. N. Virvilis, D. Gritzalis, and T. Apostolopoulos. Trusted computing vs. advanced persistent threats: Can a defender win this game? In Ubiquitous Intelligence and Computing, 2013 IEEE 10th International Conference on and 10th International Conference on Autonomic and Trusted Computing (UIC/ATC), pages 396-403. IEEE, 2013.
25. S. Vogl, J. Pfoh, T. Kittel, and C. Eckert. Persistent data-only malware: Function hooks without code. In Symposium on Network and Distributed System Security (NDSS), 2014.
26. Z. Wang and X. Jiang. Hypersafe: A lightweight approach to provide lifetime hypervisor control-flow integrity. In Security and Privacy (SP), 2010 IEEE Symposium on, pages 380-395. IEEE, 2010.