StreamBox-TZ: Secure Stream Analytics at the Edge with TrustZone
Talkat USENIX ATC '19 · on Thursday, 2019-07-11· at 14:00· USENIX ATC Track II: Grand Ballroom VII–IX·
summary
StreamBox-TZ implements a secure data plane inside ARM TrustZone that encloses analytics state and computation while leaving scheduling in an untrusted control plane, using trusted IO to ingest data directly and a compact in-TEE memory container (an unbounded array implemented in ~0.7K LOC) plus 23 trusted primitives. The system processes up to 140 MB/sec (12M events/sec) with sub-second delay on an octa-core ARMv8 and adds 42.5 KB executable to the TCB, keeping verification via audit records and overall security overhead under ~25%.
AI-written summary · about
chapters (10)
- 0:00Start
- 2:31Problem Statement
- 2:48Background: ARM TrustZone
- 3:55Challenges
- 6:33Technique : Architecting a Data Plane for Protection
- 11:05Technique 3: Verifying Edge Analytics Execution
- 12:25Implementation & Evaluation
- 13:12Insecure: Running in Normal World
- 14:35Conclusion
- 15:14Questions?
related talks
27mvTZ: Virtualizing ARM TrustZone
25mA DRM solution using TZMP
08mSecure Debug IoT on v8-M Cortex-M33
39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...
27mMay the Trust be with You: Empowering TrustZone-M with Multiple Trusted Environments
48mOP-TEE: Using the ARM Trust-Zone to Control Tamper Resistant Processors
41mPanel: A New Root Of Trust: Changing Computing With TEE
27mZephyr and Trusted Execution Environments