http://chineseinput.net/에서 pinyin(병음)방식으로 중국어를 변환할 수 있습니다.
변환된 중국어를 복사하여 사용하시면 됩니다.
ARM TrustZone 기반 신뢰실행환경의 취약점과 방어기법에 대한 연구
유준승 ( Jun-seung You ),서지원 ( Jiwon Seo ),방인영 ( In-young Bang ),백윤흥 ( Yunheung Paek ) 한국정보처리학회 2020 한국정보처리학회 학술대회논문집 Vol.27 No.1
현재 전 세계 수많은 모바일 기기들은 보안에 민감한 애플리케이션들과 운영체제 요소들을 보호하기 위하여 ARM TrustZone 기반 신뢰실행환경 (Trusted Execution Environment) 을 사용한다. 하지만, 신뢰실행환경이 제공하는 높은 보안성에도 불구하고, 이에 대한 성공적인 공격 사례들이 지속적으로 확인되고 있다. 본 논문에서는 이러한 공격들을 가능하게 하는 ARM TrustZone 기반 신뢰실행환경의 취약점들을 소개한다. 이와 더불어 취약점들을 보완하기 위한 다양한 방어 기법 연구에 대해 살펴본다.
카욘도마틴 ( Kayondo Martin ),방인영 ( In-young Bang ),유준승 ( Jun-seung You ),서지원 ( Ji-won Seo ),백윤흥 ( Yun-heung Paek ) 한국정보처리학회 2021 한국정보처리학회 학술대회논문집 Vol.28 No.1
Rust is a promising system programming language that made its debut in 2010. It was developed to address the security problems in C/C++. It features a property called ownership, on which it relies to mitigate memory attacks. For this and its many other features, the language has consistently gained popularity and many companies have begun to seriously consider it for production uses. However, Rust also supports safe and unsafe regions under which the foreign function interface (FFI), used to port to other languages, falls. In the unsafety region, Rust surrenders most of its safety features, allowing programmers to perform operations without check. In this study, we analyze the security issues that arise due to Rust’s safety/unsafety property, especially those introduced by Rust FFI.
이경룡 ( Kyeong-ryong Lee ),조영필 ( Yeong-pil Cho ),유준승 ( Jun-seung You ),백윤흥 ( Yun-heung Paek ) 한국정보처리학회 2021 한국정보처리학회 학술대회논문집 Vol.28 No.2
Trusted Execution Environment(TEE) is an execution environment provided by CPU hardware to gain guarantee that the execution context is as expected by the execution requester. Remote attestation of the execution context naturally arises from the concept of TEEs. Many implementations of TEEs use cryptographic remote attestation methods. Though the implementation of attestation may be simple, the implementation of verification may be very complex and heavy. By using a server delegating the verification process of attestation information, one may produce lightweight binaries that may verify peers and establish a secure channel with verified peers.