基于TrustZone硬件隔离技术的CLKScrew攻击防护研究  

Research on CLKScrew Attack Protection Based on TrustZone Hardware Isolation Technology

作　　者：王建新[1] 郑玉崝 许弘可 WANG Jianxin;ZHENG Yuzheng;XU Hongke(Beijing Electronic Science and Technology Institute,Beijing 100070,P.R.China)

机构地区：[1]北京电子科技学院,北京100070

出　　处：《北京电子科技学院学报》2024年第2期14-22,共9页Journal of Beijing Electronic Science And Technology Institute

基　　金：中央高校基本科研业务费资金资助(3282024009);中央高校基本科研业务费(应用研究类)(2023A03);教育部新工科研究与实践项目(E⁃AQGABQ20202704);北京高等教育“本科教学改革创新项目”(202110018002、20220121Z0208);北京电子科技学院一流学科建设项目(20210064Z0401、20210056Z0402)。

摘　　要：随着信息技术的迅猛发展,嵌入式系统中的安全性问题日益受到关注。本文针对嵌入式平台中动态电压频率调整技术存在的安全漏洞,基于高级精简指令集机器的TrustZone硬件隔离技术设计并实现了一种可信执行环境(TEE),利用TrustZone技术实现了TEE与普通执行环境操作系统间的切换。该环境能够有效抵御CLKScrew攻击,即通过多次调整中央处理器(CPU)线程工作频率来触发嵌入式平台的运行错误。实验结果表明,在该可信执行环境中,即使面临CLK⁃Screw攻击,CPU线程仍能正常工作,确保了系统的安全性。With the speedy development of information technology,security issue in embedded systems received an increasing attention.To solve the security vulnerabilities of dynamic voltage and frequency adjustment technology in embedded systems,a trusted execution environment(TEE)based on ARM's TrustZone hardware isolation technology is designed and implemented.Switch between the TEE and the general execution environment operating system is realized by utilizing the TrustZone technology.The TEE could successfully defend against the CLKScrew attack that is repeatedly modifying the central pro⁃cessing unit(CPU)thread working frequency to cause operation error for embedded platform.Experi⁃ment results indicate that in the TEE,CPU thread maintains operating even against the CLKScrew at⁃tack,ensuring the system security.

关 键 词：可信执行环境 CLKScrew攻击 动态电压频率调整 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]