Visible to the public RPC Based Framework for Partitioning IoT Security Software for Trusted Execution Environments

TitleRPC Based Framework for Partitioning IoT Security Software for Trusted Execution Environments
Publication TypeConference Paper
Year of Publication2019
AuthorsFischer, T., Lesjak, C., Pirker, D., Steger, C.
Conference Name2019 IEEE 10th Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON)
Keywordscompositionality, Framework, graphical user interface, graphical user interfaces, Information Reuse and Security, Information security, interface definition language files, Internet of Things, IoT devices, IoT security software, Java, Libraries, partitioning, partitioning security components, Protocols, pubcrawl, python, remote procedure calls, Resiliency, RPC, RPC based framework, RPC-based framework, RPC-based solutions, security, security of data, Servers, side-channel attacks, software engineering, software partitioning, TEE, TEE integration time, trusted execution environments
AbstractPartitioning security components of IoT devices to enable the use of Trusted Execution Environments adds resilience against side-channel attacks. Devices are hardened against extraction of sensitive information, but at the same time additional effort must be spent for the integration of the TEE and software partitioning. To perform partitioning, the developer typically inserts Remote Procedure Calls into the software. Existing RPC-based solutions require the developer to write Interface Definition Language files to generate RPC stubs. In this work, we present an RPC-based framework that supports software partitioning via a graphical user interface. The framework extracts required information about the interfaces from source-code header files to eliminate the need for IDL files. With this approach the TEE integration time is reduced and reuse of existing libraries is supported. We evaluate a Proof-of-Concept by partitioning a TLS library for IoT devices and compare our approach to other RPC-based solutions.
DOI10.1109/IEMCON.2019.8936247
Citation Keyfischer_rpc_2019