基于TrustZone的系统安全防护技术研究综述  

A Review of System Security Protection Technology Based on TrustZone

作　　者：伍文昌 赵敏 关兴义 WU Wenchang;ZHAO Min;GUAN Xingyi(College of Command and Control Engineering,Army Engineering University,Nanjing Jiangsu 210001,China)

机构地区：[1]陆军工程大学指挥控制工程学院,江苏南京210001

出　　处：《信息安全与通信保密》2022年第10期74-85,共12页Information Security and Communications Privacy

摘　　要：嵌入式应用系统在互联网时代得到了蓬勃发展,但是网络应用安全问题也随之而来。TrustZone技术是ARM公司在此场景下特意为电子消费产品构建的一个能够抵御各种可能的攻击的系统级安全框架,是ARM处理器特有的一种安全技术。围绕ARM TrustZone的原理和特点,重点分析了基于TrustZone的系统安全防护技术,将该技术与其他系统安全防护技术进行对比分析,进一步探讨了其优势与不足之处。最后结合当前可信执行环境领域存在的安全问题,对该技术的未来发展进行了展望。Embedded application system has developed vigorously in the Internet era,but network application security problems have followed. In this scenario,TrustZone is a system-level security framework specially constructed by ARM for consumer electronic products to resist various possible attacks. It is a unique security technology for ARM processors. This paper introduces the principle and features of ARM TrustZone,focuses on the analysis of TrustZone-based system security protection technology,based on which the technology is compared with other system security protection technologies,and further discusses its advantages and disadvantages. Finally,the future development of this technology is prospected based on the security problems existing in the current embedded application field.

关 键 词：TrustZone技术 系统安全 可信执行环境 安全防护 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]