Secure Processor Architecture Based On Memory Isolation

With the popularization and application of computer technology,especially the use of smart mobile devices and cloud computing,the attacks focused on sensitive information stored in computer systems have made serve damage to society.All of them leads to urgent needs to develop information security technology and research system protection solution.Traditional system security solutions based on software have many problems including the risk that software is easier compromised by bugs and vulnerabilities.To solve these issues,industries and academia have proposed security protection approaches based on hardware.Comparing with software approach,security technologies based on hardware have more security,higher performance.I focus on research to isolated execution environment,and introduce SecPage,a lightweight secure processor architecture.SecPage utilizes dedicated hardware including secure instructions,registers to provide isolated environment in memory area.Applications can put sensitive code and data into isolated memory.Any software,including operating system,cannot access content inside isolated memory except using dedicated SecPage mechanism.I also describe the implementation and evaluation of SecPage to prove that SecPage has made an acceptable trade-off between cost,security,and performance.Last,I list some scenarios where SecPage is suitable to deploy and future improvement I can make.