Export Citations
Save this search
Please login to be able to save your searches and receive alerts for new content matching your search criteria.
- research-articleNovember 2023
Whole-Program Control-Flow Path Attestation
CCS '23: Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications SecurityNovember 2023, Pages 2680–2694https://doi.org/10.1145/3576915.3616687Path attestation is an approach to remotely attest the execution of a program ℘. In path attestation, a prover platform, which executes ℘, convinces a remote verifier V of the integrity of ℘ by recording the path that ℘ takes as it executes a particular ...
- research-articleJune 2022
WebAssembly as a Common Layer for the Cloud-edge Continuum
FRAME '22: Proceedings of the 2nd Workshop on Flexible Resource and Application Management on the EdgeJuly 2022, Pages 3–8https://doi.org/10.1145/3526059.3533618Over the last decade, the cloud computing landscape has transformed from centralised architecture made of large data centres to a distributed and heterogeneous architecture embracing edge and IoT processing units. This shift has created the so-called ...
- research-articleApril 2022
Quantifying Trustworthiness in Decentralized Trusted Applications
Sat-CPS '22: Proceedings of the 2022 ACM Workshop on Secure and Trustworthy Cyber-Physical SystemsApril 2022, Pages 67–76https://doi.org/10.1145/3510547.3517930Decentralized systems play an important role in many modern data processing applications. Due to the distributed nature of these applications, participating system components are often operated by different stakeholders with potentially conflicting ...
- posterNovember 2021
POSTER: An Open-Source Framework for Developing Heterogeneous Distributed Enclave Applications
CCS '21: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications SecurityNovember 2021, Pages 2393–2395https://doi.org/10.1145/3460120.3485341We present an integrated open-source framework to develop, deploy, and use event-driven distributed enclaved applications across heterogeneous Trusted Execution Environments (TEEs). Our framework strives for strong application authenticity and integrity ...
- research-articleNovember 2019
Protecting Actuators in Safety-Critical IoT Systems from Control Spoofing Attacks
IoT S&P'19: Proceedings of the 2nd International ACM Workshop on Security and Privacy for the Internet-of-ThingsNovember 2019, Pages 8–14https://doi.org/10.1145/3338507.3358615In this paper, we propose a framework called Contego-TEE to secure Internet-of-Things (IoT) edge devices with timing requirements from control spoofing attacks where an adversary sends malicious control signals to the actuators. We use a trusted ...
-
- research-articleNovember 2019
SecTEE: A Software-based Approach to Secure Enclave Architecture Using TEE
CCS '19: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications SecurityNovember 2019, Pages 1723–1740https://doi.org/10.1145/3319535.3363205Secure enclaves provide a practical solution to secure computation, and current approaches to secure enclaves are implemented by extending hardware security mechanisms to the CPU architecture. Therefore, it is hard for a platform to offer secure ...
- posterJuly 2019
How to Securely Record Logs based on ARM TrustZone
Asia CCS '19: Proceedings of the 2019 ACM Asia Conference on Computer and Communications SecurityJuly 2019, Pages 664–666https://doi.org/10.1145/3321705.3331001A number of logs are generated from IT devices. Since logs have important information regarding a system, they are used for finding the trace of an intrusion or obtaining important information through a big data analysis. Hence, the logs have become a ...
- posterMarch 2018
SeCore: Continuous Extrospection with High Visibility on Multi-core ARM Platforms
CODASPY '18: Proceedings of the Eighth ACM Conference on Data and Application Security and PrivacyMarch 2018, Pages 161–163https://doi.org/10.1145/3176258.3176948We present SeCore, which is a novel continuous extrospection system on multi-core ARM platform. SeCore leverages ARM TrustZone technology to keep one core in the secure world and assure the integrity of the static kernel data and code in the normal ...
- research-articleJanuary 2018
SAFES: Sand-boxed Architecture for Frequent Environment Self-measurement
SysTEX '18: Proceedings of the 3rd Workshop on System Software for Trusted ExecutionOctober 2018, Pages 37–41https://doi.org/10.1145/3268935.3268939Monitoring software of low-end devices is a key part of defense in depth for IoT systems. These devices are particularly susceptible to memory corruption vulnerabilities because the limited computational resources restrict the types of countermeasures ...
- research-articleJanuary 2018
VirtSense: Virtualize Sensing through ARM TrustZone on Internet-of-Things
SysTEX '18: Proceedings of the 3rd Workshop on System Software for Trusted ExecutionOctober 2018, Pages 2–7https://doi.org/10.1145/3268935.3268937Internet-of-Things (IoTs) are becoming more and more popular in our life. IoT devices are generally designed for sensing or actuation purposes. However, the current sensing system on IoT devices lacks the understanding of sensing needs, which diminishes ...
- research-articleOctober 2017
Towards the Security of Motion Detection-based Video Surveillance on IoT Devices
Thematic Workshops '17: Proceedings of the on Thematic Workshops of ACM Multimedia 2017October 2017, Pages 228–235https://doi.org/10.1145/3126686.3126713Video surveillance enabled by Internet of Things (IoT) devices, such as smart cameras, has become a popular set of applications recently with the trend of adopting IoT in multimedia signal processing and smart home use cases. Despite its intelligence ...
- research-articleJune 2017
PROTC: PROTeCting Drone's Peripherals through ARM TrustZone
DroNet '17: Proceedings of the 3rd Workshop on Micro Aerial Vehicle Networks, Systems, and ApplicationsJune 2017, Pages 1–6https://doi.org/10.1145/3086439.3086443As of Mar 2017, the FAA (Federal Aviation Administration) has more than 750k registered drone users. Safety of drones is the most crucial issue while designing drones. Most prior research focuses on aspects of the drone piloting system, drone ...
- research-articleJune 2017
TrustShadow: Secure Execution of Unmodified Applications with ARM TrustZone
MobiSys '17: Proceedings of the 15th Annual International Conference on Mobile Systems, Applications, and ServicesJune 2017, Pages 488–501https://doi.org/10.1145/3081333.3081349The rapid evolution of Internet-of-Things (IoT) technologies has led to an emerging need to make them smarter. A variety of applications now run simultaneously on an ARM-based processor. For example, devices on the edge of the Internet are provided with ...
- research-articleApril 2017
The Circle Game: Scalable Private Membership Test Using Trusted Hardware
ASIA CCS '17: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications SecurityApril 2017, Pages 31–44https://doi.org/10.1145/3052973.3053006Malware checking is changing from being a local service to a cloud-assisted one where users' devices query a cloud server, which hosts a dictionary of malware signatures, to check if particular applications are potentially malware. Whilst such an ...
- posterOctober 2016
POSTER: DroidShield: Protecting User Applications from Normal World Access
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1760–1762https://doi.org/10.1145/2976749.2989052Smartphones are becoming the main data sharing and storage devices in both our personal and professional lives, as companies now allow employees to share the same device for both purposes, provided the company's confidential information can be ...
- research-articleJune 2016
Regulating ARM TrustZone Devices in Restricted Spaces
MobiSys '16: Proceedings of the 14th Annual International Conference on Mobile Systems, Applications, and ServicesJune 2016, Pages 413–425https://doi.org/10.1145/2906388.2906390Smart personal devices equipped with a wide range of sensors and peripherals can potentially be misused in various environments. They can be used to exfiltrate sensitive information from enterprises and federal offices or be used to smuggle unauthorized ...
- research-articleOctober 2015
TrustOTP: Transforming Smartphones into Secure One-Time Password Tokens
CCS '15: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications SecurityOctober 2015, Pages 976–988https://doi.org/10.1145/2810103.2813692Two-factor authentication has been widely used due to the vulnerabilities associated with traditional text-based password. One-time password (OTP) plays an indispensable role on authenticating mobile users to critical web services that demand a high ...
- research-articleNovember 2014
Hypervision Across Worlds: Real-time Kernel Protection from the ARM TrustZone Secure World
CCS '14: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications SecurityNovember 2014, Pages 90–102https://doi.org/10.1145/2660267.2660350TrustZone-based Real-time Kernel Protection (TZ-RKP) is a novel system that provides real-time protection of the OS kernel using the ARM TrustZone secure world. TZ-RKP is more secure than current approaches that use hypervisors to host kernel protection ...
- research-articleFebruary 2014
Using ARM trustzone to build a trusted language runtime for mobile applications
ASPLOS '14: Proceedings of the 19th international conference on Architectural support for programming languages and operating systemsFebruary 2014, Pages 67–80https://doi.org/10.1145/2541940.2541949This paper presents the design, implementation, and evaluation of the Trusted Language Runtime (TLR), a system that protects the confidentiality and integrity of .NET mobile applications from OS security breaches. TLR enables separating an application's ...
Also Published in:
ACM SIGPLAN Notices: Volume 49 Issue 4, April 2014ACM SIGARCH Computer Architecture News: Volume 42 Issue 1, March 2014 - research-articleNovember 2013
Secure enrollment and practical migration for mobile trusted execution environments
SPSM '13: Proceedings of the Third ACM workshop on Security and privacy in smartphones & mobile devicesNovember 2013, Pages 93–98https://doi.org/10.1145/2516760.2516764Smartphones can implement various security services from mobile banking to security tokens used for physical access control. System-wide trusted execution environments (TEEs), like ARM TrustZone, allow implementation of these services that withstand ...