TrustDump: Reliable Memory Acquisition on Smartphones

摘要: With the wide usage of smartphones in our daily life, new malware is emerging to compromise mobile OS and steal sensitive data from applications. Anti-malware tools should be continuously updated via static dynamic analysis detect prevent newest malware. Dynamic depends on a reliable memory acquisition applications running smartphones. In this paper, we develop TrustZone-based mechanism called TrustDump that capable reliably obtaining RAM CPU registers even if has crashed or been compromised. The TrustZone’s normal domain, tool secure which access privilege domain. Instead using hypervisor ensure an isolation between tool, rely ARM TrustZone achieve hardware-assisted with small trusted computing base (TCB) about 450 lines code. We build prototype Freescale i.MX53 QSB.