引用本文:李舟军,沈东,苏晓菁,马金鑫.基于ARM虚拟化扩展的安全防护技术.软件学报,2017,28(9):2229-2247
【打印本页】   【下载PDF全文】   查看/发表评论  【EndNote】   【RefMan】   【BibTex】
←前一篇|后一篇→ 过刊浏览    高级检索
本文已被:浏览 4761次   下载 8330 本文二维码信息
码上扫一扫!
分享到: 微信 更多
基于ARM虚拟化扩展的安全防护技术
李舟军1, 沈东1, 苏晓菁2, 马金鑫3
1.北京航空航天大学 计算机学院, 北京 100191;2.中国科学院 微电子研究所 微电子器件与集成技术重点实验室, 北京 100029;3.中国信息安全测评中心, 北京 100085
摘要:
近几年来,随着移动平台用户量的增加,移动平台安全成为安全领域关注的焦点.而ARM的虚拟化扩展,使得如何基于虚拟化技术进行移动平台的安全防护成为一个研究热点.首先,介绍了虚拟化技术的分类以及早期的相关研究;然后给出了ARM虚拟化扩展的相关概念,并与x86虚拟化扩展进行了对比;随后,重点介绍了基于硬件辅助虚拟化技术的安全研究现状,主要包括通用的系统框架以及针对特定攻击的安全工具;最后,对基于ARM虚拟化扩展的安全防护技术的发展方向进行了展望.
关键词:  ARM  虚拟化  系统安全  移动安全  虚拟机监视器
DOI:10.13328/j.cnki.jos.005185
分类号:
基金项目:国家高技术研究发展计划(863)(2015AA016004);国家自然科学基金(61370126,61672081,61502536);北京成像技术高精尖创新中心项目(BAICIT-2016001)
Security Technology Based on ARM Virtualization Extension
LI Zhou-Jun1, SHEN Dong1, SU Xiao-Jing2, MA Jin-Xin3
1.School of Computer Science and Engineering, BeiHang University, Beijing 100191, China;2.Key Laboratory of Microelectronics Devices & Integrated Technology, Institute of Microelectronics, The Chinese Academy of Sciences, Beijing 100029, China;3.China Information Technology Security Evaluation Center, Beijing 100085, China
Abstract:
In recent years, with the growth in the number of mobile platform users, mobile platform security has become the focal point in the field of information security. The virtualization extension of ARM, which facilitates the security of mobile platform based on virtualization technology, is a hot research topic. This paper first introduces the types of virtualization technology and previous related studies. Then the concepts of ARM virtualization extension are presented, and the comparison with the x86 virtualization extension is given as well. Subsequently, the paper focuses on the current situation of security research based on hardware virtualization extension, including the general system frameworks and security tools for specific attacks. Analysis of future's research trend of ARM virtualization-based security technology is put forward at the end.
Key words:  ARM  virtualization  system security  mobile security  virtual machine monitor