SeCloak: ARM Trustzone-based Mobile Peripheral Control

Reliable on-off control of peripherals on smart devices is a key to security and privacy in many scenarios. Journalists want to reliably turn off radios to protect their sources during investigative reporting. Users wish to ensure cameras and microphones are reliably off during private meetings. In this paper, we present SeCloak, an ARM TrustZone-based solution that ensures reliable on-off control of peripherals even when the platform software is compromised. We design a secure kernel that co-exists with software running on mobile devices (e.g., Android and Linux) without requiring any code modifications. An Android prototype demonstrates that mobile peripherals like radios, cameras, and microphones can be controlled reliably with a very small trusted computing base and with minimal performance overhead.

• Publication year

  2018

• Venue

  ACM SIGMOBILE International Conference on Mobile Systems, Applications, and Services

• Publication date

  2018-06-10

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/3210240.3210334arXiv 2001.08840
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• TrUbi: A System for Dynamically Constraining Mobile Devices within Restrictive Usage Scenarios

  2017cited by this paper
• TrustShadow: Secure Execution of Unmodified Applications with ARM TrustZone

  2017cited by this paper
• SGXIO: Generic Trusted I/O Path for Intel SGX

  2017cited by this paper
• SchrodinText: Strong Protection of Sensitive Textual Content of Mobile Applications

  2017cited by this paper
• Komodo: Using verification to disentangle secure-enclave hardware from software

  2017cited by this paper
• PROTC: PROTeCting Drone's Peripherals through ARM TrustZone

  2017cited by this paper
• Client-Focused Security Assessment of mHealth Apps and Recommended Practices to Prevent or Mitigate Transport Security Issues

  2017cited by this paper
• Securing IoT devices using JavaScript based sandbox

  2016cited by this paper
• Regulating ARM TrustZone Devices in Restricted Spaces

  2016cited by this paper
• Viola: Trustworthy Sensor Notifications for Enhanced Privacy on Mobile Systems

  2016cited by this paper
• Hardware-Assisted On-Demand Hypervisor Activation for Efficient Security Critical Code Execution on Mobile Devices

  2016cited by this paper
• Sego: Pervasive Trusted Metadata for Efficiently Verified Untrusted System Services

  2016cited by this paper
• A Case for Enforcing App-Specific Constraints to Mobile Devices by Using Trust Leases

  2015cited by this paper
• Boxify: Full-fledged App Sandboxing for Stock Android

  2015cited by this paper
• PowerSpy: Location Tracking Using Mobile Device Power Analysis

  2015cited by this paper
• Dancing with Giants: Wimpy Kernels for On-Demand Isolated I/O

  2014cited by this paper
• Security Concerns in Android mHealth Apps

  2014cited by this paper
• Gyrophone: Recognizing Speech from Gyroscope Signals

  2014cited by this paper
• Enter Sandbox: Android Sandbox Comparison

  2014cited by this paper
• PIN Skimming: Exploiting the Ambient-Light Sensor in Mobile Devices

  2014cited by this paper
• Building trusted path on untrusted device drivers for mobile devices

  2014cited by this paper
• Vetting undesirable behaviors in android apps with permission use analysis

  2013cited by this paper
• AppGuard - Enforcing User Requirements on Android Apps

  2013cited by this paper
• InkTag: secure applications on an untrusted operating system

  2013cited by this paper
• DriverGuard: Virtualization-Based Fine-Grained Protection on I/O Flows

  2013cited by this paper
• AndroidLeaks: Automatically Detecting Potential Privacy Leaks in Android Applications on a Large Scale

  2012cited by this paper
• Hey, You, Get Off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets

  2012cited by this paper
• Eternal Sunshine of the Spotless Machine: Protecting Privacy with Ephemeral Channels

  2012cited by this paper
• Software abstractions for trusted sensors

  2012cited by this paper
• A security enforcement kernel for OpenFlow networks

  2012cited by this paper
• Building Verifiable Trusted Path on Commodity x86 Computers

  2012cited by this paper
• ACCessory: password inference using accelerometers on smartphones

  2012cited by this paper
• Curbing Android Permission Creep

  2011cited by this paper
• QUIRE: Lightweight Provenance for Smart Phone Operating Systems

  2011cited by this paper
• Taming Information-Stealing Smartphone Applications (on Android)

  2011cited by this paper
• PiOS: Detecting Privacy Leaks in iOS Applications

  2011influential reference
• CRePE: Context-Related Policy Enforcement for Android

  2010cited by this paper
• An Android Application Sandbox system for suspicious software detection

  2010cited by this paper
• TrustVisor: Efficient TCB Reduction and Attestation

  2010cited by this paper
• Apex: extending Android permission model and enforcement with user-defined runtime constraints

  2010cited by this paper
• BitVisor: a thin hypervisor for enforcing i/o device security

  2009cited by this paper
• Hardware Enforcement of Application Security Policies Using Tagged Memory

  2008cited by this paper
• Overshadow: a virtualization-based approach to retrofitting protection in commodity operating systems

  2008cited by this paper
• Flicker: an execution infrastructure for tcb minimization

  2008cited by this paper
• Linux security modules: general security support for the linux kernel

  2002cited by this paper
• A VMM security kernel for the VAX architecture

  1990cited by this paper
• Security Kernel Design and Implementation: An Introduction

  1983cited by this paper
• Proceedings of the Freenix Track: 2001 Usenix Annual Technical Conference Integrating Flexible Support for Security Policies into the Linux Operating System

  year unknowncited by this paper

• It's TEEtime: Secure Interrupt Isolation for Normal-world Enclaves on Arm

  2026cites this paper
• IoTCloak: Practical Integrity Checks of Machine Learning Inference Code and Models on Tiny IoT Devices

  2025cites this paper
• A Survey of Hardware Improvements to Secure Program Execution

  2024cites this paper
• The SA4P Framework: Sensing and Actuation as a Privilege

  2024cites this paper
• TeeFilter: High-Assurance Network Filtering Engine for High-End IoT and Edge Devices based on TEEs

  2024cites this paper
• Virtualized network packet inspection

  2024cites this paper
• (In)visible Privacy Indicator: Security Analysis of Privacy Indicator on Android Devices

  2024cites this paper
• Devlore: Extending Arm CCA to Integrated Devices A Journey Beyond Memory to Interrupt Isolation

  2024cites this paper
• Confidential Computing on Heterogeneous Systems: Survey and Implications

  2024cites this paper
• SGXFault: An Efficient Page Fault Handling Mechanism for SGX Enclaves

  2024cites this paper
• Conditional Network Availability: Enhancing Connectivity Guarantees for TEE-Based Services

  2024cites this paper
• Confidential Computing on Heterogeneous CPU-GPU Systems: Survey and Future Directions

  2024cites this paper
• SoK: Opportunities for Accelerating Multi - Party Computation via Trusted Hardware

  2024cites this paper
• Aster: Fixing the Android TEE Ecosystem with Arm CCA

  2024cites this paper
• Privadome: Delivery Drones and Citizen Privacy

  2024cites this paper
• Caveat (IoT) Emptor: Towards Transparency of IoT Device Presence

  2023influential citation
• Fortress: Securing IoT Peripherals with Trusted Execution Environments

  2023cites this paper
• Hey Kimya, Is My Smart Speaker Spying on Me? Taking Control of Sensor Privacy Through Isolation and Amnesia

  2023cites this paper
• Safe and Practical GPU Computation in TrustZone

  2023influential citation
• Enhancing IoT Security and Privacy with Trusted Execution Environments and Machine Learning

  2023cites this paper
• Privadome: Protecting Citizen Privacy from Delivery Drones

  2022cites this paper
• MagDefender: Detecting Eavesdropping on Mobile Devices using the Built-in Magnetometer

  2022cites this paper
• CRONUS: Fault-isolated, Secure and High-performance Heterogeneous Computing for Trusted Execution Environment

  2022cites this paper
• My Mobile Knows That I am Driving! In-Vehicle (Relative) Blind Localization of a Smartphone

  2022cites this paper
• TrustedGateway: TEE-Assisted Routing and Firewall Enforcement Using ARM TrustZone

  2022influential citation
• Wink: Deniable Secure Messaging

  2022cites this paper
• HARM: Hardware-Assisted Continuous Re-randomization for Microcontrollers

  2022cites this paper
• Anonymous Trusted Data Relocation for TEEs

  2022cites this paper
• CamShield: Securing Smart Cameras through Physical Replication and Isolation

  2022cites this paper
• WIP: Interrupt Attack on TEE-protected Robotic Vehicles

  2022cites this paper
• 3rdParTEE: Securing Third-Party IoT Services Using the Trusted Execution Environment

  2022cites this paper
• RT-TEE: Real-time System Availability for Cyber-physical Systems using ARM TrustZone

  2022cites this paper
• It's TEEtime: Bringing User Sovereignty to Smartphones

  2022cites this paper
• Understanding and defending against the security threats on mobile and IoT devices

  2021cites this paper
• Trustzone-based secure lightweight wallet for hyperledger fabric

  2021cites this paper
• Sovereign Smartphone: To Enjoy Freedom We Have to Control Our Phones

  2021cites this paper
• PIE: A Platform-wide TEE

  2021cites this paper
• ObscureNet: Learning Attribute-invariant Latent Representation for Anonymizing Sensor Data

  2021cites this paper
• Rushmore: securely displaying static and animated images using TrustZone

  2021influential citation
• Remotely controlling TrustZone applications? A study on securely and resiliently receiving remote commands

  2021cites this paper
• Preventing malicious communication using virtualization

  2021cites this paper
• M2MON: Building an MMIO-based Security Reference Monitor for Unmanned Vehicles

  2021cites this paper
• SecureFS: A Secure File System for Intel SGX

  2021cites this paper
• FreqCounter: Efficient Cacheability of Encryption and Integrity Tree Counters in Secure Processors

  2021cites this paper
• Minimum Viable IO Drivers for TrustZone

  2021cites this paper
• Safe and Practical GPU Acceleration in TrustZone

  2021influential citation
• Learning Representations for Anonymizing Sensor Data in IoT Applications

  2021influential citation
• Minimum viable device drivers for ARM trustzone

  2021cites this paper
• ShadowNet: A Secure and Efficient On-device Model Inference System for Convolutional Neural Networks

  2020cites this paper
• Composite Enclaves: Towards Disaggregated Trusted Execution

  2020cites this paper
• TrustyShare: A Sharing Scheme using ARM TrustZone

  2020cites this paper
• HyperWall: A Hypervisor for Detection and Prevention of Malicious Communication

  2020cites this paper
• TrustICT: an efficient trusted interaction interface between isolated execution domains on ARM multi-core processors

  2020cites this paper
• ShadowNet: A Secure and Efficient System for On-device Model Inference

  2020cites this paper
• Enclave Computing Paradigm: Hardware-assisted Security Architectures & Applications

  2020cites this paper
• PIE: A Dynamic TCB for Remote Systems with a Platform Isolation Environment

  2020cites this paper
• TRUST.IO: Protecting Physical Interfaces on Cyber-physical Systems

  2020cites this paper
• TruzCall: Secure VoIP Calling on Android using ARM TrustZone

  2020cites this paper
• SoK: Understanding the Prevailing Security Vulnerabilities in TrustZone-assisted TEE Systems

  2020cites this paper
• Personal Data Management Systems: The security and functionality standpoint

  2019cites this paper
• Regulating smart devices in restricted spaces

  2019cites this paper
• SoK: Hardware Security Support for Trustworthy Execution

  2019cites this paper
• On the Performance of ARM TrustZone - (Practical Experience Report)

  2019cites this paper
• Distributed Applications and Interoperable Systems

  2019cites this paper
• Cross-device access control with Trusted Capsules

  2019cites this paper
• TEEMo: trusted peripheral monitoring for optical networks and beyond

  2019cites this paper
• VirtSense: Virtualize Sensing through ARM TrustZone on Internet-of-Things

  2018cites this paper
• Leveraging ARM TrustZone and Verifiable Computing to Provide Auditable Mobile Functions

  2018cites this paper
• Towards privacy-compliant mobile computing

  2018cites this paper
• This paper is included in the Proceedings of the 32nd USENIX Security Symposium.

  year unknowncites this paper