Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Trust Issues: Exploiting TrustZone TEEs

projectzero.google | blog | #exploitation | #mobile-security | #arm | #tee | #project-zero | #trustzone | #biometrics

Summary

A Project Zero post on exploiting TrustZone-based TEEs, examining how sensitive data like biometrics and keys are protected and where these trusted environments fail.
Published
Collected

original ↗

Related coverage

research · blog.quarkslab.com
A Deep Dive Into Samsung's TrustZone (Part 1)
Part one of a three-part series touring Samsung's TrustZone implementation (with Trustonic/Kinibi): its components, how they interact, and the TEE security model on Galaxy S6-S9 devices.
research · blog.quarkslab.com
Attacking the ARM's TrustZone
Second TrustZone post: a technical view of the attack surface — monitor message handlers, trustlets and Secure Boot — and what code execution at each privilege level enables.
research · blog.quarkslab.com
Introduction to Trusted Execution Environment: ARM's TrustZone
First of two posts on hardware TEEs: introduces Trusted Execution Environments, then ARM TrustZone — Secure and Non-Secure worlds, monitor mode, and trustlet-based trusted applications.
blog · projectzero.google
What is a "good" memory corruption vulnerability?
A Google Project Zero essay on what makes a memory corruption vulnerability valuable, focusing on how reliably it can be exploited.
blog · projectzero.google
Analysis and Exploitation of an ESET Vulnerability
A Google Project Zero write-up analyzing and exploiting a vulnerability in ESET antivirus software, highlighting the attack surface introduced by security products.
blog · projectzero.google
Owning Internet Printing - A Case Study in Modern Software Exploitation
A Google Project Zero case study demonstrating a complete exploit chain against the CUPS internet printing service.
back