TSSP:一种TrustZone架构中的会话调度方案

发布时间：2018-11-17 10:33

【摘要】：针对TrustZone架构中,恶意CA长时间占用会话资源引起DOS攻击的问题,提出了一种TrustZone架构中的会话调度方案(TSSP)。结合TrustZone会话执行的特点,给出了会话等待队列、执行队列的构建方法,同时引入了等待队列会话优先级、执行队列会话剩余价值的计算方法,在此基础上,对会话调度策略进行详细的阐述。通过实验证明了本方案能够保证高优先级的会话优先执行,同时能够有效抵抗由于恶意CA长时间占用会话资源引起的DOS攻击。最后,从安全与性能两个方面对加入会话调度机制后的系统进行评估。实验结果表明,加入调度机制后,在保证系统安全性的基础上,增加的性能开销在0.01~0.27 s之间。
[Abstract]:In order to solve the problem of DOS attack caused by malicious CA using session resource for a long time in TrustZone architecture, a session scheduling scheme (TSSP). In TrustZone architecture is proposed. According to the characteristics of TrustZone session execution, this paper gives a method of constructing session waiting queue and execution queue, and introduces a method to calculate the residual value of queue session by introducing the priority of waiting queue session and executing queue session. The session scheduling strategy is described in detail. Experiments show that this scheme can guarantee high priority session priority and can effectively resist the DOS attack caused by malicious CA which takes up session resources for a long time. Finally, the system after session scheduling is evaluated from two aspects: security and performance. The experimental results show that after adding the scheduling mechanism, the additional performance overhead is between 0.01 and 0.27 s on the basis of ensuring the security of the system.
【作者单位】：武汉大学计算机学院;空天信息安全与可信计算教育部重点实验室;
【基金】：国家“863”计划资助项目(2015AA016002) 江苏省自然科学基金青年基金资助项目(BK20130372) 国家“973”计划资助项目(2014CB340600)
【分类号】：TP309

【参考文献】