Research On The Memory Protection Strategy For Secure Processor And Its Software Design

In recent years,security issues such as secret information leakage damage the safety and interests of users seriously,affecting personal privacy,trade secrets,and even a threat to national security.With the attach importance to information security in the domestic and overseas,the level of information offensive and defensive gradually escalated,the schemes of protecting information security program is gradually shifting from software to hardware.Hardware security and software co-development show good security features and small performance overhead.An important way to ensure information security is to enhance the safety of the processor.Since all programs are running on the processor,security processor is the prerequisite for system security,while memory is an important part of the processor,secure memory is the prerequisite for secure processors.Therefore,the research of memory protection strategy for the security processor gradually becomes the necessary demand of information security.In this thesis,the memory protection strategy of the security processor is taken as the object of study.Based on the architecture of hardware-supported security processor,the feasible software and hardware co-design scheme for system security is studied.The research proposed a security processor based on memory isolation program which do not only protects the sensitive information stored in the Secure page,but also has flexible,universal and lightweight features.The reasons of information leakage is analyzed through literature research.Finally,the overall design of the memory protection strategy together with the detailed design of the software architecture are given.To show the advantages of our design,the whole system simulation and performance are analyzed.The results of simulation show that the average performance overhead of the security system is only 0.97% lower than that of the traditional system.The results of work showed that under the premise of lower performance overhead and smaller modification,our research enhanced the security features of computer systems significantly,and the security processor has been effectively improved.