Skip to main navigation Skip to search Skip to main content

ICORe: Continuous and proactive extrospection on multi-core IoT devices

  • Penghui Zhang
  • , Haehyun Cho
  • , Ziming Zhao
  • , Adam Doupé
  • , Gail Joon Ahn

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

1 Scopus citations

Abstract

In this paper, we present ICORE, a novel continuous and proactive extrospection system with high visibility on IoT devices deploying multi-core ARM platforms. Dedicated cores named Isolated Cores are configured to stay in the TrustZone secure world upon system boot to perform monitoring functionalities to extrospect static normal world kernel memory area proactively, continuously, and stealthily. Different from the existing TrustZone paradigm, in which secure world serves as the slave of the normal world, ICORE makes the secure world play a master role. Therefore, ICORE remains stealthy and proactive to perform monitoring functionalities. The evaluation results show that ICORE is effective and imposes negligible performance degradation using the SPEC CPU2017 benchmark.

Original languageEnglish
Title of host publicationProceedings of the ACM Symposium on Applied Computing
PublisherAssociation for Computing Machinery
Pages851-860
Number of pages10
ISBN (Print)9781450359337
DOIs
StatePublished - 2019
Event34th Annual ACM Symposium on Applied Computing, SAC 2019 - Limassol, Cyprus
Duration: Apr 8 2019Apr 12 2019

Publication series

NameProceedings of the ACM Symposium on Applied Computing
VolumePart F147772

Conference

Conference34th Annual ACM Symposium on Applied Computing, SAC 2019
Country/TerritoryCyprus
CityLimassol
Period04/8/1904/12/19

Keywords

  • ARM TrustZone
  • CPU isolation
  • Extrospection

Fingerprint

Dive into the research topics of 'ICORe: Continuous and proactive extrospection on multi-core IoT devices'. Together they form a unique fingerprint.

Cite this