KEVLAR-TZ：一种用于ARM的安全缓存TrustZone
KEVLAR-TZ: A Secure Cache for ARM TrustZone
摘要：
边缘设备越来越多地负责存储隐私敏感数据，特别是可植入设备，可穿戴设备和近距离设备可以24/7收集和处理高分辨率的生命体征。以隐私保护的方式存储和执行对这些数据的计算是至关重要的。我们提出了KEVLAR-TZ，一个应用程序级的可信缓存，旨在利用ARM TrustZone，一个流行的可信执行环境，可在消费级设备。为了促进与现有系统和物联网设备和协议的集成，KEVLAR-TZ公开了一个基于REST的接口，该接口具有TrustZone飞地内的连接端点。此外，它利用设备上的安全持久存储来保证数据在重新启动时的持久性。我们完全实现KEVLAR-TZ上的OP-TEE框架，并通过实验评估其性能。我们的结果展示了性能权衡，例如在吞吐量和延迟方面，对于各种工作负载，我们相信我们的结果对实践者和TrustZone系统的一般开发人员都很有用。KEVLAR-TZ可在https://github.com/mqttz/kevlar-tz/上以开源形式获得。
英文摘要：
Edge devices are increasingly in charge of storing privacy-sensitive data, in particular implantables, wearables, and nearables can potentially collect and process high-resolution vital signs 24/7. Storing and performing computations over such data in a privacy-preserving fashion is of paramount importance. We present KEVLAR-TZ, an application-level trusted cache designed to leverage ARM TrustZone, a popular trusted execution environment available in consumer-grade devices. To facilitate the integration with existing systems and IoT devices and protocols, KEVLAR-TZ exposes a REST-based interface with connection endpoints inside the TrustZone enclave. Furthermore, it exploits the on-device secure persistent storage to guarantee durability of data across reboots. We fully implemented KEVLAR-TZ on top of the OP-TEE framework, and experimentally evaluated its performance. Our results showcase performance trade-offs, for instance in terms of throughput and latency, for various workloads, and we believe our results can be useful for practitioners and in general developers of systems for TrustZone. KEVLAR-TZ is available as open-source at https://github.com/mqttz/kevlar-tz/.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
