Year: 2024
Type: article
Abstract: Trusted Execution Environments (TEEs) employ hardware-based isolation mechanisms to safeguard the confidentiality and integrity of sensitive code and data. One such prevalent implementation is Arm TrustZone, which partitions the system into the secure and normal (non-secure) worlds. However, this partitioning results in the secure world having very limited visibility into the operating information of the normal world, creating a semantic gap between these two worlds. Specifically, the secure world lacks an effective user identity authentication when receiving data requests from the normal world. Consequently, malicious Client Applications (CAs) in the normal world can deceive Trusted Applications (TAs) in the secure world by utilizing elaborate request parameters, compromising the sensitive data stored by other CAs. We systematically classify these Semantic Gap Vulnerabilities (SGVs) and propose a mate system for the TEE calledMaTEEto defend against SGVs.MaTEEutilizes Arm Pointer Authentication (PA) to bind each request to the corresponding CA's identity and then verifies the identity when the CA accesses sensitive data, thereby preventing malicious request forgery. In particular,MaTEEisolates sensitive data of different CAs without modifying existing CAs and TAs. Our evaluation demonstrates thatMaTEEsuccessfully defends against SGVs with a minimal runtime overhead (2.19%).
Authors: Shiqi Liu, Xiang Li, Jie Wang, Yongpeng Gao, Jiajin Hu
Institutions: Huazhong University of Science and Technology, Zhejiang Lab
Language: English
Subfield: Artificial Intelligence
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
Award: G294427655
OpenAlex ID: W4401628462