Secure boot, trusted boot and remote attestation for ARM TrustZone-based IoT Nodes

With the extensive application of IoT techniques, devices have become ubiquitous in daily lives. Meanwhile, attacks against emerged to compromise by tampering with system pre-installed programs or injecting new malware. To mitigate these attacks, integrity enforcement systems has been proposed. The an device includes load-time and runtime integrity. In this paper, we design based on ARM TrustZone enforce First, establish root trust propose a hybrid booting approach consisting both secure boot trusted Second, investigate paging-based process measurement method measure NW processes conduct remote attestation results ensuring We implement prototype NXP i.MX6Q SABRE SD development board assess its feasibility. Real-world experiment demonstrate that our introduces negligible performance overhead original system.