May the Trust be with You: Empowering TrustZone-M with Multiple Trusted Environments
summary
Claim: TrustZone‑M’s dual-world model is too big and brittle, so a new microkernel splits an MCU into isolated multiple trusted worlds. Implementation: a 6 KB kernel called MicroTango runs on Musca B1, schedules up to four worlds (bare metal, Zephyr RTOS, CLI, TCP/IP), assigns peripherals, and uses SAU/IDAU and bus filters. Results: context switch costs 110 clock cycles, TCB drops from ~100 KB to ~6 KB, and a vulnerability study analyzes >200 TrustZone issues with >50% rated critical.
AI-written summary · about
chapters (10)
- 0:00Introduction and agenda
- 1:00IoT security challenges
- 2:38TrustZone overview
- 3:55Technical architecture
- 7:15Vulnerability analysis
- 12:49MicroTango design
- 17:54Scheduling and interrupts
- 20:35Evaluation results
- 22:49Demo and use case
- 25:16Conclusion and future work
related talks
39mTrusted Firmware M, Secure Partitioning – Compartmentalization in IoT
27mvTZ: Virtualizing ARM TrustZone
39mTrusted Firmware M, Secure Partitioning – Compartmentalization in IoT
27mZephyr and Trusted Execution Environments
23mTrusted Firmware M – what’s cooking?
57mTrusted Firmware M : Core and Partition Manager
27mZephyr and Trusted Execution Environments
08mSecure Debug IoT on v8-M Cortex-M33