Arm TrustZone: evaluating the diversity of the memory subsystem

Dissertação de mestrado em Engenharia Eletrónica Industrial e ComputadoresThe diversification of the embedded market has led the once single-purpose built embedded device to become a broader concept that can accommodate more general-purpose solutions, by widening its hardware and software resources. A huge diversity in system resources and requirements has boosted the investigation around virtualization technology, which is becoming prevalent in the embedded systems domain, allowing timing and spatial sharing of hardware and software resources between specialized subsystems. As strict timing demands imposed in realtime virtualized systems must be met, coupled with a small margin for the penalties incurred by conventional software-based virtualization, resort to hardware-assisted solutions has become indispensable. Although not a virtualization but security-oriented technology, Arm TrustZone is seen by many as a reliable hardware-based virtualization alternative, with the low cost and high spread of TrustZone-enabled processors standing as strong arguments for its acceptance. But, since Trust- Zone only dictates the hardware infrastructure foundations, providing SoC designers with a range of components that can fulfil specific functions, several key-components and subsystems of this technology are implementation defined. This approach may hinder a system designer’s work, as it may impair and make the portability of system software a lot more complicated. As such, this thesis proposes to examine how different manufacturers choose to work with the TrustZone architecture, and how the changes introduced by this technology may affect the security and performance of TrustZone-assisted virtualization solutions, in order to scale back those major constraints. It identifies the main properties that impact the creation and execution of system software and points into what may be the most beneficial approaches for developing and using TrustZone-assisted hardware and software.A recente metamorfose na área dos sistemas embebidos transformou estes dispositivos, outrora concebidos com um único e simples propósito, num aglomerado de subsistemas prontos para integrar soluções mais flexíveis. Este aumento de recursos e de requisitos dos sistemas potenciou a investigação em soluções de virtualização dos mesmos, permitindo uma partilha simultânea de recursos de hardware e software entre os vários subsistemas. A proliferação destas soluções neste domínio, onde os tempos de execução têm de ser respeitados e a segurança é um ponto-chave, tem levado à adoção de técnicas de virtualização assistidas por hardware. Uma tecnologia que tem vindo a ser utilizada para este fim é a Arm TrustZone, apesar de inicialmente ter sido desenvolvida como uma tecnologia de proteção, dado a sua maior presença em placas de médio e baixo custo quando comparada a outras tecnologias. Infelizmente, dado que a TrustZone apenas fornece diretrizes base sobre as quais os fabricantes podem contruir os seus sistemas, as especificações da tecnologia divergem de fabricante para fabricante, ou até entre produtos com a mesma origem. Aliada à geral escassez de informação sobre esta tecnologia, esta característica pode trazer problemas para a criação e portabilidade de software de sistema dependente desta tecnologia. Como tal, a presente tese propõe examinar, de uma forma sistematizada, de que forma diferentes fabricantes escolhem implementar sistemas baseados na arquitetura TrustZone e em que medida as mudanças introduzidas por esta tecnologia podem afetar a segurança e desempenho de soluções de virtualização baseadas na mesma. São identificadas as principais características que podem influenciar a criação e execução de software de sistema e potenciais medidas para diminuir o seu impacto, assim como boas práticas a seguir no desenvolvimento na utilização de software e hardware baseados na TrustZone

Pervasive gaps in Amazonian ecological research

Biodiversity loss is one of the main challenges of our time,1,2 and attempts to address it require a clear un derstanding of how ecological communities respond to environmental change across time and space.3,4 While the increasing availability of global databases on ecological communities has advanced our knowledge of biodiversity sensitivity to environmental changes,5–7 vast areas of the tropics remain understudied.8–11 In the American tropics, Amazonia stands out as the world’s most diverse rainforest and the primary source of Neotropical biodiversity,12 but it remains among the least known forests in America and is often underrepre sented in biodiversity databases.13–15 To worsen this situation, human-induced modifications16,17 may elim inate pieces of the Amazon’s biodiversity puzzle before we can use them to understand how ecological com munities are responding. To increase generalization and applicability of biodiversity knowledge,18,19 it is thus crucial to reduce biases in ecological research, particularly in regions projected to face the most pronounced environmental changes. We integrate ecological community metadata of 7,694 sampling sites for multiple or ganism groups in a machine learning model framework to map the research probability across the Brazilian Amazonia, while identifying the region’s vulnerability to environmental change. 15%–18% of the most ne glected areas in ecological research are expected to experience severe climate or land use changes by 2050. This means that unless we take immediate action, we will not be able to establish their current status, much less monitor how it is changing and what is being lostinfo:eu-repo/semantics/publishedVersio

Nationwide access to endovascular treatment for acute ischemic stroke in portugal

Publisher Copyright: Copyright Ordem dos M dicos 2021.Introduction: Since the publication of endovascular treatment trials and European Stroke Guidelines, Portugal has re-organized stroke healthcare. The nine centers performing endovascular treatment are not equally distributed within the country, which may lead to differential access to endovascular treatment. Our main aim was to perform a descriptive analysis of the main treatment metrics regarding endovascular treatment in mainland Portugal and its administrative districts. Material and Methods: A retrospective national multicentric cohort study was conducted, including all ischemic stroke patients treated with endovascular treatment in mainland Portugal over two years (July 2015 to June 2017). All endovascular treatment centers contributed to an anonymized database. Demographic, stroke-related and procedure-related variables were collected. Crude endovascular treatment rates were calculated per 100 000 inhabitants for mainland Portugal, and each district and endovascular treatment standardized ratios (indirect age-sex standardization) were also calculated. Patient time metrics were computed as the median time between stroke onset, first-door, and puncture. Results: A total of 1625 endovascular treatment procedures were registered. The endovascular treatment rate was 8.27/100 000 inhabitants/year. We found regional heterogeneity in endovascular treatment rates (1.58 to 16.53/100 000/year), with higher rates in districts closer to endovascular treatment centers. When analyzed by district, the median time from stroke onset to puncture ranged from 212 to 432 minutes, reflecting regional heterogeneity. Discussion: Overall endovascular treatment rates and procedural times in Portugal are comparable to other international registries. We found geographic heterogeneity, with lower endovascular treatment rates and longer onset-to-puncture time in southern and inner regions. Conclusion: The overall national rate of EVT in the first two years after the organization of EVT-capable centers is one of the highest among European countries, however, significant regional disparities were documented. Moreover, stroke-onset-to-first-door times and in-hospital procedural times in the EVT centers were comparable to those reported in the randomized controlled trials performed in high-volume tertiary hospitalspublishersversionpublishe