Embedded Trusted Computing Environment Build Based on QEMU Virtual Machine Architecture

Abstract

With the wide application of embedded technology and its products, much attention has been turned to the development of program to improve the safety and reliability of embedded devices. In this paper, we present a construct program of embedded trusted computing environment based on QEMU virtual machine architecture. The proposed program, simulates functions of trusted cryptographic modules by software, can not only fully consider the characteristics and design constraints of embedded systems, but also does not require additional hardware. Results from an implement of prototype system on the platform of Godson-3A are presented. It is concluded that the proposed program can prevent the destruction of malicious codes and improve the safety and reliability of embedded devices with making full use of available hardware and software resources.

A Multi-level Perception Security Model Using Virtualization

“…CTVM [14] is a kernel protection framework that adopts the hardware-assisted virtualization technology of extended page table to create the isolated operating environment for untrusted modules, and then monitors them during the runtime to protect the kernel integrity of guest VM. Zhang et al [15] presented a scheme of embedded trusted computing environment based on virtual machine architecture named QEMU, wherein the functions of trusted cryptographic modules are simulated by software, thus with no other additional hardware. Kumara et al [16] presented a virtual machine introspection (VMI) based on malicious process detection approach for VM, which extracted the high level information such as system call, opened known backdoor ports from introspected memory to identify the spurious process.…”