kTPM: A Software TPM using kernel-level privilege separation for ARM

MasterAccording to improved mobile usability and services, various security issues are occurred. To enhance security of mobile devices, Trusted Platform Modules (TPMs) are used. However, hardware TPMs have limitations in terms of low performance and limited resources. This limitations disturb to adopt TPM to provide security for various applications. In this thesis, we propose kTPM, a software TPM using kernel-level privilege separation for ARM platform. kTPM resolve limitations of hardware TPM chip such as low performance and limited small NV storage. Because of kTPM running on CPU that more powerful than hardware TPM chip, it can provides high performance. Also, kTPM support NV storage via eMMC with RPMB to more usability of TPM. kTPM using trusted cloud as secure source of trusted clock and entropy to support TPM features without additional hardware requirements or TPM speci cate modi cation. We implement and demonstrate the kTPM with the TPM 2.0 speci cation. We evaluate functionalities and performance of kTPM. The results show that kTPM can support most TPM 2.0 commands, and more faster than hardware TPMs

Efficient Pre-Copy Live Migration with Memory

1

NaCl 실행환경을 위한 동기식 POSIX 소켓의 비동기식 웹 소켓으로의 인터페이스 변환 기법

2

데스크 탑 가상 머신 라이브 마이그레이션에서 ASLR이 메모리간 중복성에 미치는 영향

2

모바일 가상화 환경에서 경량하이퍼바이저 기반 소프트웨어 TPM 지원 방법

2

ARM 기반 모바일 단말의 보안성 향상을 위한 경량 하이퍼바이저 설계 및 구현

2