04495nam a22005775i 4500 978-3-031-55561-9 DE-He213 20251030112333.0 cr nn 008mamaa 240626s2024 sz | s |||| 0|eng d 9783031555619 978-3-031-55561-9 10.1007/978-3-031-55561-9 doi QA76.9.A25 UR bicssc UTN bicssc COM053000 bisacsh UR thema UTN thema Shepherd, Carlton. author. aut http://id.loc.gov/vocabulary/relators/aut 79360 Trusted Execution Environments [electronic resource] / by Carlton Shepherd, Konstantinos Markantonakis. 1st ed. 2024. Cham : Springer International Publishing : Imprint: Springer, 2024. XXVIII, 196 p. 59 illus., 51 illus. in color. online resource. text txt rdacontent computer c rdamedia online resource cr rdacarrier text file PDF rda Introduction -- Background Material -- Operating System Controls -- Isolated Hardware Execution Platforms -- Building Execution Environments from the Trusted Platform Module -- Trusted World Systems -- Enclave Computing -- Deployment Issues, Attacks, and Other Challenges -- Conclusion. Trusted execution environments (TEEs) protect sensitive code and data on computing platforms, even when the primary operating system is compromised. Once a technical curiosity, TEEs have rapidly become a key component in securing numerous systems from cloud servers to constrained devices. Today, TEEs have been deployed on billions of devices for protecting financial payments, personal files, copyrighted media content, and many others. Despite this, TEEs remain poorly understood due to their complexity and diversity. This book addresses this gap, providing a comprehensive treatment of different TEE technologies, their features, benefits, and shortcomings. A holistic view of secure and trusted execution is taken, examining smart cards and CPU protection rings before discussing modern TEEs, such as Intel SGX and ARM TrustZone. A wide range of paradigms for building secure and trusted execution environments are explored, from dedicated security chips to system-on-chip extensions and virtualisation technologies. The relevant industry standards and specifications are covered in detail, including how TEEs are evaluated and certified in practice with respect to security. Several case studies are presented showing how TEEs are used in some common security mechanisms, such as secure boot sequences, biometric authentication, and file-based encryption. This book also discusses present challenges in the field, covering potential attack vectors against TEEs and concerns relating to fragmentation, interoperability, and transparency. Lastly, a selection of future directions are examined that may be used by the trusted execution environments of tomorrow. This book is particularly targeted at practitioners and researchers in cyber security, such as penetration testers, security engineers, and security analysts. Additionally, this book serves as a valuable resource for university students, both postgraduate and advanced undergraduates, and professors in computer science and electrical engineering. Data protection. Computer networks Security measures. 63949 Cryptography. 64299 Data encryption (Computer science). 58243 Cooperating objects (Computer systems). 64303 Data and Information Security. 66492 Mobile and Network Security. 66379 Cryptology. 66491 Cyber-Physical Systems. 65638 Markantonakis, Konstantinos. author. (orcid)0000-0003-3975-9033 https://orcid.org/0000-0003-3975-9033 aut http://id.loc.gov/vocabulary/relators/aut 79361 SpringerLink (Online service) Springer Nature eBook Printed edition: 9783031555602 Printed edition: 9783031555626 https://doi.org/10.1007/978-3-031-55561-9 ZDB-2-SCS ZDB-2-SXCS 61040 61040