Understanding the Security of ARM Debugging Features Zhenyu Ning and - PowerPoint PPT Presentation

Understanding the Security of ARM Debugging Features Zhenyu Ning and Fengwei Zhang COMPASS Lab Wayne State University May 21, 2019 Understanding the Security of ARM Debugging Features, S&P 19 1

Outline ◮ Introduction ◮ Obstacles in Traditional Debugging Model ◮ Nailgun Attack ◮ Mitigations ◮ Conclusion Understanding the Security of ARM Debugging Features, S&P 19 2

Outline ◮ Introduction ◮ Obstacles for Traditional Debugging Model ◮ Nailgun Attack ◮ Mitigations ◮ Conclusion Understanding the Security of ARM Debugging Features, S&P 19 3

Introduction Modern processors are equipped with hardware-based debugging features to facilitate on-chip debugging process. - e.g. debug registers, debug exceptions and hardware-based trace. - It normally requires JTAG [1] connection to make use of these features. Understanding the Security of ARM Debugging Features, S&P 19 4

Traditional Debugging Debug Authentication JTAG Interface Debug Target Debug Host (TARGET) (HOST) What makes it secure? Understanding the Security of ARM Debugging Features, S&P 19 5

Traditional Debugging Debug Authentication JTAG Interface Debug Target Debug Host (TARGET) (HOST) What makes it secure? Understanding the Security of ARM Debugging Features, S&P 19 6

Traditional Debugging Debug Authentication JTAG Interface Debug Target Debug Host (TARGET) (HOST) What makes it secure? Understanding the Security of ARM Debugging Features, S&P 19 7

Traditional Debugging Debug Authentication JTAG Interface Debug Target Debug Host (TARGET) (HOST) What makes it secure? Understanding the Security of ARM Debugging Features, S&P 19 8

Introduction What makes it secure? ◮ Obstacle 1 : Physical access. ◮ Obstacle 2 : Debug authentication. Do these obstacles work? Understanding the Security of ARM Debugging Features, S&P 19 9

Introduction What makes it secure? ◮ Obstacle 1 : Physical access. ◮ Obstacle 2 : Debug authentication. Do these obstacles work? Understanding the Security of ARM Debugging Features, S&P 19 10

Outline ◮ Introduction ◮ Obstacles for Traditional Debugging Model ◮ Nailgun Attack ◮ Mitigations ◮ Conclusion Understanding the Security of ARM Debugging Features, S&P 19 11

Obstacles for Traditional Debugging Model It is due to two general assumptions: ◮ Obstacle 1 : Physical access. ◮ Obstacle 2 : Debug authentication. Does it really require physical access? Understanding the Security of ARM Debugging Features, S&P 19 12

Inter-Processor Debugging We can use one processor on the chip to debug another one on the same chip, and we refer it as inter-processor debugging . ◮ Memory-mapped debugging registers. - Introduced since ARMv7. ◮ No JTAG, No physical access. Understanding the Security of ARM Debugging Features, S&P 19 13

Obstacles for Traditional Debugging Model It is due to two general assumptions: ◮ Obstacle 1 : Physical access. ◮ Obstacle 2 : Debug authentication. Does debug authentication work as expected? Understanding the Security of ARM Debugging Features, S&P 19 14

ARM Debug Authentication TARGET (Normal State) ... pc MOV x3, #3 x4, #4 MOV MOV x0, x3 x1, x4 MOV LDR pc, [pc, #-0x10] ... TARGET is executing instructions pointed by pc Understanding the Security of ARM Debugging Features, S&P 19 15

ARM Debug Authentication TARGET (Normal State) ... pc MOV x3, #3 x4, #4 MOV MOV x0, x3 x1, x4 MOV LDR pc, [pc, #-0x10] ... Non-invasive Debugging : Monitoring without control Understanding the Security of ARM Debugging Features, S&P 19 16

ARM Debug Authentication TARGET (Debug State) ... MOV x3, #3 pc x4, #4 MOV MOV x0, x3 x1, x4 MOV LDR pc, [pc, #-0x10] ... Invasive Debugging : Control and change status Understanding the Security of ARM Debugging Features, S&P 19 17

ARM Debug Authentication TARGET (Normal State) ... Debug pc Disabled MOV x3, #3 x4, #4 MOV MOV x0, x3 x1, x4 MOV LDR pc, [pc, #-0x10] ... Debug Authentication Signal : Whether debugging is allowed Understanding the Security of ARM Debugging Features, S&P 19 18

ARM Debug Authentication TARGET (Normal State) ... Debug pc Disabled MOV x3, #3 x4, #4 MOV MOV x0, x3 x1, x4 MOV LDR pc, [pc, #-0x10] ... Four signals for: Secure/Non-secure, Invasive/Non-invasive Understanding the Security of ARM Debugging Features, S&P 19 19

ARM Ecosystem ARM SoC Vendor OEM User ◮ ARM licenses technology to the SoC Vendors. - e.g., ARM architectures and Cortex processors ◮ Defines the debug authentication signals. Understanding the Security of ARM Debugging Features, S&P 19 20

ARM Ecosystem ARM SoC Vendor OEM User ◮ The SoC Vendors develop chips for the OEMs. - e.g., Qualcomm Snapdragon SoCs ◮ Implement the debug authentication signals. Understanding the Security of ARM Debugging Features, S&P 19 21

ARM Ecosystem ARM SoC Vendor OEM User ◮ The OEMs produce devices for the users. - e.g., Samsung Galaxy Series and Huawei Mate Series ◮ Configure the debug authentication signals. Understanding the Security of ARM Debugging Features, S&P 19 22

ARM Ecosystem ARM SoC Vendor OEM User ◮ Finally, the User can enjoy the released devices. - Tablets, smartphones, and other devices ◮ Learn the status debug authentication signals. Understanding the Security of ARM Debugging Features, S&P 19 23

Debug Authentication Signals ◮ What is the status of the signals in real-world device? ◮ How to manage the signals in real-world device? Understanding the Security of ARM Debugging Features, S&P 19 24

Debug Authentication Signals Table: Debug Authentication Signals on Real Devices. Debug Authentication Signals Category Platform / Device DBGEN NIDEN SPIDEN SPNIDEN ARM Juno r1 Board ✔ ✔ ✔ ✔ Development Boards NXP i.MX53 QSB ✖ ✔ ✖ ✖ IoT Devices Raspberry PI 3 B+ ✔ ✔ ✔ ✔ 64-bit ARM miniNode ✔ ✔ ✔ ✔ Cloud Packet Type 2A Server ✔ ✔ ✔ ✔ Platforms Scaleway ARM C1 Server ✔ ✔ ✔ ✔ Google Nexus 6 ✖ ✔ ✖ ✖ Samsung Galaxy Note 2 ✔ ✔ ✖ ✖ Mobile Huawei Mate 7 ✔ ✔ ✔ ✔ Devices Motorola E4 Plus ✔ ✔ ✔ ✔ Xiaomi Redmi 6 ✔ ✔ ✔ ✔ Understanding the Security of ARM Debugging Features, S&P 19 25

Debug Authentication Signals Table: Debug Authentication Signals on Real Devices. Debug Authentication Signals Category Platform / Device DBGEN NIDEN SPIDEN SPNIDEN ARM Juno r1 Board ✔ ✔ ✔ ✔ Development Boards NXP i.MX53 QSB ✖ ✔ ✖ ✖ IoT Devices Raspberry PI 3 B+ ✔ ✔ ✔ ✔ 64-bit ARM miniNode ✔ ✔ ✔ ✔ Cloud Packet Type 2A Server ✔ ✔ ✔ ✔ Platforms Scaleway ARM C1 Server ✔ ✔ ✔ ✔ Google Nexus 6 ✖ ✔ ✖ ✖ Samsung Galaxy Note 2 ✔ ✔ ✖ ✖ Mobile Huawei Mate 7 ✔ ✔ ✔ ✔ Devices Motorola E4 Plus ✔ ✔ ✔ ✔ Xiaomi Redmi 6 ✔ ✔ ✔ ✔ Understanding the Security of ARM Debugging Features, S&P 19 26

Debug Authentication Signals Table: Debug Authentication Signals on Real Devices. Debug Authentication Signals Category Platform / Device DBGEN NIDEN SPIDEN SPNIDEN ARM Juno r1 Board ✔ ✔ ✔ ✔ Development Boards NXP i.MX53 QSB ✖ ✔ ✖ ✖ IoT Devices Raspberry PI 3 B+ ✔ ✔ ✔ ✔ 64-bit ARM miniNode ✔ ✔ ✔ ✔ Cloud Packet Type 2A Server ✔ ✔ ✔ ✔ Platforms Scaleway ARM C1 Server ✔ ✔ ✔ ✔ Google Nexus 6 ✖ ✔ ✖ ✖ Samsung Galaxy Note 2 ✔ ✔ ✖ ✖ Mobile Huawei Mate 7 ✔ ✔ ✔ ✔ Devices Motorola E4 Plus ✔ ✔ ✔ ✔ Xiaomi Redmi 6 ✔ ✔ ✔ ✔ Understanding the Security of ARM Debugging Features, S&P 19 27

Debug Authentication Signals How to manage the signals in real-world device? ◮ For both development boards with manual, we cannot fully control the debug authentication signals. - Signals in i.MX53 QSB can be enabled by JTAG. - The DBGEN and NIDEN in ARM Juno board cannot be disabled. ◮ In some mobile phones, we find that the signals are controlled by One-Time Programmable (OTP) fuse. For all the other devices, nothing is publicly available. Understanding the Security of ARM Debugging Features, S&P 19 28

Obstacles for Traditional Debugging Model To summarize, ◮ We don’t need physical access to debug a processor. ◮ The debug authentication also allows us to debug the processor. Understanding the Security of ARM Debugging Features, S&P 19 29

Outline ◮ Introduction ◮ Obstacles for Traditional Debugging Model ◮ Nailgun Attack ◮ Mitigations ◮ Conclusion Understanding the Security of ARM Debugging Features, S&P 19 30

Nailgun Attack Memory-mapped Interface Debug Target Debug Host (TARGET) (HOST) Understanding the Security of ARM Debugging Features, S&P 19 31

Nailgun Attack Memory-mapped Interface Debug Target Debug Host (TARGET) (HOST) Understanding the Security of ARM Debugging Features, S&P 19 32