SeBo: Secure Boot System for Preventing Compromised Android Linux
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
As the usage of mobile devices becomes diverse, a number of attacks on Android also have increased. Among the attacks, Android can be compromised by flashing a new image of compromised Android Linux. In order to solve this problem, we propose SeBo (Secure Boot System) which prevents compromised Android Linux by guaranteeing secure boot environment for mobile devices based on ARM TrustZone architecture. SeBo checks the hash value of the Android Linux image before the Android Linux executes. SeBo detects all the attacks within 5 seconds. Moreover, since SeBo only trusts the Secure Bootloader from Secure World, SeBo can reduce the additional overhead of checking the Normal Bootloader from Normal World.
Abstract
As the usage of mobile devices becomes diverse, a number of attacks on Android also have increased. Among the attacks, Android can be compromised by flashing a new image of compromised Android Linux. In order to solve this problem, we propose SeBo (Secure Boot System) which prevents compromised Android Linux by guaranteeing secure boot environment for mobile devices based on ARM TrustZone architecture. SeBo checks the hash value of the Android Linux image before the Android Linux executes. SeBo detects all the attacks within 5 seconds. Moreover, since SeBo only trusts the Secure Bootloader from Secure World, SeBo can reduce the additional overhead of checking the Normal Bootloader from Normal World.
참고문헌 (14)
- S. Yuru, "Rootguard : Protecting rooted android phones", IEEE Computer, 47(6), pp.32~40 (2014)
- "The case for SE Android" (2011)[URL]
- S. Smalley, "Security Enhanced(SE)Android : Bringing Flexible MAC to Android", NDSS, 310, pp.20~38 (2013)
- T.M. Kim, "Tiny Monitoring Platform for Protecting Data against Compromised Mobile Operating Systems", Proceeding of Autumn Conference on IEMEK
- Technologies, A.R.M, "ARM Architecture Reference Manual ARMv7-A and ARMv7-R edition", ARM Architecture Reference Manual ARMv7-A and ARMv7-R edition, ~
- "ARM Security Technology Building a Secure System using TrustZone® Technology"[URL]
- Aghera, P., "U.S. Patent Application 10", 652,352, 2003
- "Chapter 4. Global timer, private timers, and watchdog registers"[URL]
- "ARM:global_timer: Add ARM global timer support"[URL]
- D. Menascé, "Security performance", IEEE Internet Computing, 7(3), pp.84~87 (2003)
- "The MD5 message-digest algorithm" (1992)[URL]
- "Samsung KNOX Workspace"[URL]
- J. Shin, "A Secure Data Management Framwork based on ARM TrustZone for Cloud Storage Services", Proceeding of Autumn Conference on IEMEK
- 신재복, "모바일 클라우드 스토리지 서비스에서의 데이터 보안을 위한 데이터 접근 제어 및 보안 키 관리 기법", 대한임베디드공학회논문지, 8(6), pp.303~309 (2013), 대한임베디드공학회[DOI]