Trusted Firmware M, Secure Partitioning – Compartmentalization in IoT - Miklos Balint & Ken Liu, Arm

Trusted Firmware M, Secure Partitioning – Compartmentalization in IoT - Miklos Balint & Ken Liu, Arm The three keystones of information security (confidentiality, integrity and availability) require an IoT device to provide isolation of its software components and means by which these components interact. This presentation discusses the implementation of a framework that provides isolation of secure and non-secure processing environments based on TrustZone for Armv8-M and compartmentalization within the secure environment using memory region based protection. TF-M provides services to the non-secure application using isolated threads in the secure environment. The talk will discuss the issues that need to be addressed in such a compartmentalized system, e.g. how interrupts owned by an unprivileged compartment can be handled, how isolation is achieved and managed and how sandboxed partitions interact in Trusted Firmware M. About Miklos Balint Miklos is a software engineer at Arm focusing on IoT security. He has been working with embedded software for over 10 years on platforms ranging from telecom core network nodes to server blades and IoT devices. He is a maintainer of Trusted Firmware M open source project. About Ken Liu Ken Liu is a software engineer at Arm focusing on Security Solutions. He has been working in silicon company for over 15 years before join Arm; focus on silicon support software and security solutions like DRM and secure boot. He is now a member engineer of Trusted Firmware M open source project.