Publication
μRTZvisor: A secure and safe real-time hypervisor
| Summary: | Virtualization has been deployed as a key enabling technology for coping with the ever growing complexity and heterogeneity of modern computing systems. However, on its own, classical virtualization is a poor match for modern endpoint embedded system requirements such as safety, security and real-time, which are our main target. Microkernel-based approaches to virtualization have been shown to bridge the gap between traditional and embedded virtualization. This notwithstanding, existent microkernel-based solutions follow a highly para-virtualized approach, which inherently requires a significant software engineering effort to adapt guest operating systems (OSes) to run as userland component s. In this paper, we present μRTZVisor as a new TrustZone-assisted hypervisor that distinguishes itself from state-of-the-art TrustZone solutions by implementing a microkernel-like architecture while following an object-oriented approach. Contrarily to existing microkernel-based solutions, μRTZVisor is able to run nearly unmodified guest OSes, while, contrarily to existing TrustZone-assisted solutions, it provides a high degree of functionality and configurability, placing strong emphasis on the real-time support. Our hypervisor was deployed and evaluated on a Xilinx Zynq-based platform. Experiments demonstrate that the hypervisor presents a small trusted computing base size (approximately 60KB), and a performance overhead of less than 2% for a 10 ms guest-switching rate. |
|---|---|
| Main Authors: | Martins, José |
| Other Authors: | Alves, João; Cabral, Jorge; Tavares, Adriano; Pinto, Sandro |
| Subject: | Arm Hypervisor Microkernel Real-time Safety Security TrustZone Virtualization |
| Year: | 2017 |
| Country: | Portugal |
| Document type: | article |
| Access type: | open access |
| Associated institution: | Universidade do Minho |
| Language: | English |
| Origin: | RepositóriUM - Universidade do Minho |
Similar Items
article Towards a trustZone-assisted hypervisor for real-time embedded systems
by: Pinto, Sandro
Published: (2017)
by: Pinto, Sandro
Published: (2017)
article FreeTEE: when real-time and security meet
by: Pinto, Sandro
Published: (2015)
by: Pinto, Sandro
Published: (2015)
article LTZVisor: TrustZone is the key
by: Pinto, Sandro
Published: (2017)
by: Pinto, Sandro
Published: (2017)
article Self-secured devices: high performance and secure I/O access in TrustZone-based systems
by: Pinto, Sandro
Published: (2021)
by: Pinto, Sandro
Published: (2021)
article TZ- VirtIO: Enabling Standardized Inter-Partition Communication in a Trustzone-Assisted Hypervisor
by: Oliveira, A.
Published: (2018)
by: Oliveira, A.
Published: (2018)
article AnyTEE: An open and interoperable software defined TEE framework
by: Cerdeira, David
Published: (2025)
by: Cerdeira, David
Published: (2025)
article Shedding light on static partitioning hypervisors for arm-based mixed-criticality systems
by: Martins, José Carvalho
Published: (2023)
by: Martins, José Carvalho
Published: (2023)
school Extending the security spectrum of ARM TrustZone technology
by: Mendes, Eduardo Gil Ferraz Soares
Published: (2017)
by: Mendes, Eduardo Gil Ferraz Soares
Published: (2017)
school Towards multi-OS support on TrustZone-M MCUs
by: Santos, Afonso Manuel Macedo dos
Published: (2020)
by: Santos, Afonso Manuel Macedo dos
Published: (2020)
school Segurança informática em arquiteturas ARM (ARM TrustZone)
by: Oliveira, Geraldo Piçarra
Published: (2023)
by: Oliveira, Geraldo Piçarra
Published: (2023)
description RISC-V Needs Secure 'Wheels': the MCU Initiator-Side Perspective
by: Pinto, Sandro
Published: (2024)
by: Pinto, Sandro
Published: (2024)
school TWallet ARM TrustZone Enabled Trustable Mobile Wallet: A Case for Cryptocurrency Wallets
by: Gameiro, Rafael Rodrigues
Published: (2022)
by: Gameiro, Rafael Rodrigues
Published: (2022)
school Multicore embedded virtualization architecture exploiting ARM TrustZone
by: Oliveira, André Antunes
Published: (2017)
by: Oliveira, André Antunes
Published: (2017)
school Handling mixed-criticality systems on low-end and low-power IoT devices
by: Oliveira, Daniel José Cunha
Published: (2025)
by: Oliveira, Daniel José Cunha
Published: (2025)
article IIoTEED: an enhanced, trusted execution environment for industrial IoT edge devices
by: Pinto, Sandro
Published: (2017)
by: Pinto, Sandro
Published: (2017)
article Let’s get physical: Rethinking the static partitioning hypervisor architecture for an MMU-less memory model
by: Santos, Afonso
Published: (2025)
by: Santos, Afonso
Published: (2025)
school VirtIO infrastructure for a static partition hypervisor: virtio-blk and virtio-console
by: Ribeiro, António Nuno Alves Cardoso Capela
Published: (2023)
by: Ribeiro, António Nuno Alves Cardoso Capela
Published: (2023)
article A customizable and ARINC 653 quasi-compliant hypervisor
by: Tavares, Adriano
Published: (2012)
by: Tavares, Adriano
Published: (2012)
school Evaluation of hypervisors for embedded and real-time systems
by: Teixeira, Rui Pedro de Castro Brito
Published: (2020)
by: Teixeira, Rui Pedro de Castro Brito
Published: (2020)
school Towards trustworthy TrustZone-assisted TEEs
by: Cerdeira, David Martins
Published: (2024)
by: Cerdeira, David Martins
Published: (2024)
school PCIe Passthrough for the Bao Hypervisor
by: Soares, Carlos Tiago Castro
Published: (2025)
by: Soares, Carlos Tiago Castro
Published: (2025)
article BiRtIO: VirtIO for real-time network interface sharing on the Bao hypervisor
by: Peixoto, João
Published: (2024)
by: Peixoto, João
Published: (2024)
article BUSted!!! Microarchitectural side-channel attacks on the MCU bus interconnect
by: Rodrigues, Cristiano
Published: (2024)
by: Rodrigues, Cristiano
Published: (2024)
school Testing Automotive Hypervisors
by: Ferreira, Gonçalo Tavares Antão Folhas
Published: (2024)
by: Ferreira, Gonçalo Tavares Antão Folhas
Published: (2024)
article Virtualization today, virtualization tomorrow: problems, challenges, and opportunities for mixed-criticality systems
by: Pinto, Sandro
Published: (2023)
by: Pinto, Sandro
Published: (2023)
school TrustZone based attestation in secure runtime verification for embedded systems
by: Quaresma, Miguel Miranda
Published: (2020)
by: Quaresma, Miguel Miranda
Published: (2020)
school Ontology-driven metamodeling towards hypervisor design automation: runtime security and data integrity
by: Lopes, José Pedro Silva
Published: (2017)
by: Lopes, José Pedro Silva
Published: (2017)
school Comparação do Desempenho de Infraestruturas Virtualizadas de Elevada Disponibilidade Usando Hypervisors Nativos ou Containers
by: Louro, André Filipe Castro
Published: (2018)
by: Louro, André Filipe Castro
Published: (2018)
school Multi-criticality Hypervisor for Automotive Domain
by: Serra, João Filipe Marques
Published: (2014)
by: Serra, João Filipe Marques
Published: (2014)
article SecureQNN: introducing a privacy-preserving framework for QNNs at the deep edge
by: Costa, Miguel Ângelo Peixoto
Published: (2023)
by: Costa, Miguel Ângelo Peixoto
Published: (2023)
school A Web-based Solution for Virtual Machine Instances Migration Across Type-2 Hypervisors
by: Ribeiro, Didier Martins
Published: (2014)
by: Ribeiro, Didier Martins
Published: (2014)
school Towards a formally verified microkernel using the VCC verifier
by: Tojal, Joaquim José e Silva de Carvalho
Published: (2010)
by: Tojal, Joaquim José e Silva de Carvalho
Published: (2010)
article uTango: an open-source TEE for IoT devices
by: Oliveira, Daniel José Cunha
Published: (2022)
by: Oliveira, Daniel José Cunha
Published: (2022)
article SecureQNN: Shielding the intellectual property of QNNs in TinyML systems
by: Costa, Miguel
Published: (2025)
by: Costa, Miguel
Published: (2025)
article Enhancing security in 5G edge networks: predicting real-time zero trust attacks using machine learning in SDN environments
by: Ashfaq, Fiza
Published: (2025)
by: Ashfaq, Fiza
Published: (2025)
school Desenvolvimento de um inovador microkernel por hardware para microcontroladores focando nas aplicações de sistemas baseados em tarefas
by: Dantas, L. P.
Published: (2019)
by: Dantas, L. P.
Published: (2019)
school Security in Virtualized Systems: Contributions on Anomaly Detection and Intrusion Injection
by: Gonçalves, Charles Ferreira
Published: (2025)
by: Gonçalves, Charles Ferreira
Published: (2025)
article IRQ coloring: mitigating interrupt-generated interference on ARM multicore platforms
by: Costa, Diogo
Published: (2023)
by: Costa, Diogo
Published: (2023)
school A contribution to the improvement of the Bodum Data Center
by: Lopes, Luca Gil
Published: (2023)
by: Lopes, Luca Gil
Published: (2023)
school Relatório de Projeto – Virtualização de Servidores
by: Almeida, Miguel
Published: (2014)
by: Almeida, Miguel
Published: (2014)
Funded activities
No funded projects found.
Similar Items
-
article Towards a trustZone-assisted hypervisor for real-time embedded systems
by: Pinto, Sandro
Published: (2017) -
article FreeTEE: when real-time and security meet
by: Pinto, Sandro
Published: (2015) -
article LTZVisor: TrustZone is the key
by: Pinto, Sandro
Published: (2017) -
article Self-secured devices: high performance and secure I/O access in TrustZone-based systems
by: Pinto, Sandro
Published: (2021) -
article TZ- VirtIO: Enabling Standardized Inter-Partition Communication in a Trustzone-Assisted Hypervisor
by: Oliveira, A.
Published: (2018)