基于ARM虚拟化扩展的安全防护技术  

Security Technology Based on ARM Virtualization Extension

作　　者：李舟军[1] 沈东 苏晓菁 马金鑫[3] 

机构地区：[1]北京航空航天大学计算机学院,北京100191 [2]中国科学院微电子研究所微电子器件与集成技术重点实验室,北京100029 [3]中国信息安全测评中心,北京100085

出　　处：《软件学报》2017年第9期2229-2247,共19页Journal of Software

基　　金：国家高技术研究发展计划(863)(2015AA016004);国家自然科学基金(61370126;61672081;61502536);北京成像技术高精尖创新中心项目(BAICIT-2016001)~~

摘　　要：近几年来,随着移动平台用户量的增加,移动平台安全成为安全领域关注的焦点.而ARM的虚拟化扩展,使得如何基于虚拟化技术进行移动平台的安全防护成为一个研究热点.首先,介绍了虚拟化技术的分类以及早期的相关研究;然后给出了ARM虚拟化扩展的相关概念,并与x86虚拟化扩展进行了对比;随后,重点介绍了基于硬件辅助虚拟化技术的安全研究现状,主要包括通用的系统框架以及针对特定攻击的安全工具;最后,对基于ARM虚拟化扩展的安全防护技术的发展方向进行了展望.In recent years, with the growth in the number of mobile platform users, mobile platform security has become the focal point in the field of information security. The virtualization extension of ARM, which facilitates the security of mobile platform based on virtualization technology, is a hot research topic. This paper first introduces the types of virtualization technology and previous related studies. Then the concepts of ARM virtualization extension are presented, and the comparison with the x86 virtualization extension is given as well. Subsequently, the paper focuses on the current situation of security research based on hardware virtualization extension, including the general system frameworks and security tools for specific attacks. Analysis of future＇s research trend of ARM virtualization-based security technology is put forward at the end.

关 键 词：ARM 虚拟化 系统安全 移动安全 虚拟机监视器 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]