Trusted Computing on Heterogeneous Embedded Systems-on-Chip with Virtualization and Memory Protection

摘要

The paper examines the architecture of a secure and trustworthy cloud platform, which ensures strong logical and physical security on the client devices using a two-layer security mechanism: a) a hardware security module located on the SoC of the client device that protects incoming and outgoing communications (e.g., to/from an external memory) against physical attacks, and b) system software and hypervisor extensions that isolate virtual machines from one another and from the underlying hardware in order to protect against logical attacks.