SeCloak: ARM Trustzonebased Mobile Peripheral Control Reliable onoff control of peripherals on smart devices is a key to security and privacy in many scenarios. Journalists want to reliably turn off radios to protect their sources during investigative reporting. Users wish to ensure cameras and microphones are reliably off during private meetings. In this paper, we present SeCloak, an ARM TrustZonebased solution that ensures reliable onoff control of peripherals even when the platform software is compromised. We design a secure kernel that coexists with software running on mobile devices (e.g., Android and Linux) without requiring any code modifications. An Android prototype demonstrates that mobile peripherals like radios, cameras, and microphones can be controlled reliably with a very small trusted computing base and with minimal performance overhead.

SHCoT: Secure (and Verified) Hybrid Chain of Trust to Protect from Malicious Software in LightWeight Devices Looking at the speed by which the software and the hardware evolve separately, there is no surprise that the interactions of the two may result in issues and appearance of backdoors to bypass the existing security. Lately, the hardwaresoftware codesign gained lots of interest in both academia and industry, and proposed multiple hybrid solutions to enhance softwarehardware interactions, security, and safety while guaranteeing good performance. In this paper, we focus on isolation and attestation to enforce the chain of trust in lightweight devices and detect malicious data and software locally and remotely. We present SHCoT, a hardwaresoftware codesign to renew trust in devices. SHCoT is our first attempt to develop a formally verified hybrid solution to enhance existing solutions in the literature. While the work is still in progress, the first results show a partial verification of the security properties of SHCoT and small hardwaresoftware cost.