Secure and Dynamic Hardware Partitioning Management on Heterogeneous SoC

Explore a comprehensive conference talk on secure and dynamic hardware partitioning management for heterogeneous System-on-Chip (SoC) architectures. Delve into the challenges of managing complex system layers in modern IoT/edge platforms, which often include multiple operating systems, hypervisors, and trusted execution environments (TEEs). Learn about a hardware-assisted dynamic partitioning framework designed for Linux- and TEE-based heterogeneous architectures. Examine state-of-the-art hardware features for fine-grained privilege separation and understand how modifications to the Linux kernel, trusted firmware, and TEE kernel can achieve secure partitioning while addressing various security and functionality challenges. Gain insights into Azure Sphere-enabled heterogeneous SoCs, Resource Domain Controller (RDC) overview, and error handling techniques for secure debugging.

Intro
Heterogeneous SoC architectures
Azure Sphere-enabled heterogeneous SoCs
Problem overview
Progress in hardware partitioning features
RDC overview
TEE/enclave overview
Sphere HW-partitioning framework
Linux side
TEE side
Error handling and secure debugging
Summary and future work