Virtualizacija na ARM Cortex-A procesoru korištenjem ARM TrustZone ekstenzije

master's thesis

• Title (english): TrustZone-assisted Virtualization on ARM Cortex-A Processor
• Author: Katarina Vodvarka
• Mentor: Mario Cifrek (mentor)
• Committee member: Mario Cifrek (predsjednik povjerenstva)
• Committee member: Hrvoje Džapo (član povjerenstva)
• Committee member: Željka Lučev Vasić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2020-07-13, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering

Abstract

U radu su objašnjeni principi virtualizacije, sigurnosne ekstenzije ARM TrustZone
te primjena navedene ekstenzije u virtualizaciji. Sigurnosna ekstenzija ARM TrustZone postaje popularnija zbog mogućnosti virtualizacije, ali i zbog rastuće potrebe za
sigurnosti u mobilnim aplikacijama. Cilj rada bio je razvoj sustava koji se sastoji od
monitora virtualnih strojeva te sigurnog i nesigurnog virtualnog stroja. Ciljana platforma na kojoj je testiran rad sustava je razvojni sustav ZedBoard iz porodice Zynq-7000 SoC. Unutar sigurnog virtualnog stroja izvršava se FreeRTOS, unutar nesigurnog OS Linux, a cijeli sustav je pod nadzorom monitora LTZVisora. Implementirana je komunikacija između virtualnih stojeva putem dijeljene memorije, u svrhu razmjene podataka. FreeRTOS aplikacija prikuplja podatke i putem dijeljene memorije šalje ih aplikaciji unutar OS Linux, koji ih prikazuje na web stranici.

Abstract (english)

The objective of this master thesis is to implement a virtual environment based on
ARM TrustZone security extension. This extension brings new concepts to the processor architecture. The supported processor has two states: secure and non-secure.
TrustZone assisted virtualization uses these states as two isolated virtual machines.
A secure virtual machine is suitable for FreeRTOS execution, whereas a non-secure
virtual machine is convenient for feature-rich OS Linux. Open source hypervisor LTZVisor was used as a monitor layer in the system. Virtualization is implemented on
ZedBoard development kit based on Zynq-7000 SoC. FreeRTOS and Linux communicate via shared memory concept. FreeRTOS application is implemented as a data acquisition system that sends data to the non-secure system. Linux, on the other side, graphically presents received data on the website.

• Keywords: ARM TrustZone; sigurnosna ekstenzija; virtualizacija; monitor virtualnih strojeva; LTZVisor; Xilinx Linux; FreeRTOS; Zynq-7000 SoC; ZedBoard; ARM Cortex-A9
• Keywords (english): ARM TrustZone; security extension; virtualization; hypervisor; LTZVisor; Xilinx Linux; FreeRTOS; Zynq-7000 SoC; Zedboard; ARM Cortex-A9
• Language: croatian
• URN:NBN: urn:nbn:hr:168:584492
• Study programme: Title: Electrical Engineering and Information Technology; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka elektrotehnike i informacijske tehnologije (magistar/magistra inženjer/inženjerka elektrotehnike i informacijske tehnologije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 13:34:45