Open Source Summit + ELC Europe 2018

The three keystones of information security (confidentiality, integrity and availability) require an IoT device to provide isolation of its software components and means by which these components interact.

This presentation discusses the implementation of a framework that provides isolation of secure and non-secure processing environments based on TrustZone for Armv8-M and compartmentalization within the secure environment using memory region based protection.
TF-M provides services to the non-secure application using isolated threads in the secure environment.

The talk will discuss the issues that need to be addressed in such a compartmentalized system, e.g. how interrupts owned by an unprivileged compartment can be handled, how isolation is achieved and managed and how sandboxed partitions interact in Trusted Firmware M.