{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:33:33Z","timestamp":1783611213275,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":69,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,11,15]],"date-time":"2021-11-15T00:00:00Z","timestamp":1636934400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"ONR","award":["N00014-17-1-2897,N00014-17-1-2011"],"award-info":[{"award-number":["N00014-17-1-2897,N00014-17-1-2011"]}]},{"name":"SBA Research"},{"DOI":"10.13039\/501100001821","name":"Vienna Science and Technology Fund","doi-asserted-by":"publisher","award":["ICT19-056"],"award-info":[{"award-number":["ICT19-056"]}],"id":[{"id":"10.13039\/501100001821","id-type":"DOI","asserted-by":"publisher"}]},{"name":"DARPA","award":["N6600120C4031,HR001118C0060,FA8750-19-C-0003"],"award-info":[{"award-number":["N6600120C4031,HR001118C0060,FA8750-19-C-0003"]}]},{"name":"European Union?s Horizon 2020","award":["690972"],"award-info":[{"award-number":["690972"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,11,19]]},"DOI":"10.1145\/3465413.3488571","type":"proceedings-article","created":{"date-parts":[[2021,11,13]],"date-time":"2021-11-13T15:20:12Z","timestamp":1636816812000},"page":"43-57","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM's TrustZone"],"prefix":"10.1145","author":[{"given":"Davide","family":"Quarta","sequence":"first","affiliation":[{"name":"EURECOM, Sophia Antipolis, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michele","family":"Ianni","sequence":"additional","affiliation":[{"name":"Universit\u00e0 della Calabria, Rende, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aravind","family":"Machiry","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanick","family":"Fratantonio","sequence":"additional","affiliation":[{"name":"Cisco Talos, Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Eric","family":"Gustafson","sequence":"additional","affiliation":[{"name":"University of California, Santa Barbara, Santa Barbara, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Davide","family":"Balzarotti","sequence":"additional","affiliation":[{"name":"EURECOM, Sophia Antipolis, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Martina","family":"Lindorfer","sequence":"additional","affiliation":[{"name":"TU Wien, Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Giovanni","family":"Vigna","sequence":"additional","affiliation":[{"name":"University of California, Santa Barbara & VMware, Santa Barbara, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christopher","family":"Kruegel","sequence":"additional","affiliation":[{"name":"University of California, Santa Barbara, Santa Barbara, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,11,15]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"TrustZone: Integrated Hardware and Software Security . ARM Whitepaper","author":"Alves Tiago","year":"2004","unstructured":"Tiago Alves and Don Felton . 2004. TrustZone: Integrated Hardware and Software Security . ARM Whitepaper ( 2004 ). Tiago Alves and Don Felton. 2004. TrustZone: Integrated Hardware and Software Security . ARM Whitepaper (2004)."},{"key":"e_1_3_2_1_2_1","volume-title":"Scarlata","author":"Anati Ittai","year":"2013","unstructured":"Ittai Anati , Shay Gueron , Simon P. Johnson , and Vincent R . Scarlata . 2013 . Innovative Technology for CPU Based Attestation and Sealing . Intel Whitepaper ( 2013). Ittai Anati, Shay Gueron, Simon P. Johnson, and Vincent R. Scarlata. 2013. Innovative Technology for CPU Based Attestation and Sealing . Intel Whitepaper (2013)."},{"key":"e_1_3_2_1_3_1","unstructured":"AppBrain. 2019. Free vs. paid Android apps . https:\/\/www.appbrain.com\/stats\/free-and-paid-android-applications . Accessed: 2019--11--20.  AppBrain. 2019. Free vs. paid Android apps . https:\/\/www.appbrain.com\/stats\/free-and-paid-android-applications . Accessed: 2019--11--20."},{"key":"e_1_3_2_1_4_1","unstructured":"ARM Limited. 2013. ARM Compiler Software Development Guide: Execute-only Memory (Version 5.04) . https:\/\/infocenter.arm.com\/help\/index.jsp?topic=\/com.arm.doc.dui0471j\/chr1368698326509.html .  ARM Limited. 2013. ARM Compiler Software Development Guide: Execute-only Memory (Version 5.04) . https:\/\/infocenter.arm.com\/help\/index.jsp?topic=\/com.arm.doc.dui0471j\/chr1368698326509.html ."},{"key":"e_1_3_2_1_5_1","unstructured":"ARM Limited. 2018. ARM TrustZone Technology for the Armv8?M Architecture (Version 2.1) . https:\/\/developer.arm.com\/products\/architecture\/cpu-architecture\/m-profile\/docs\/100690\/latest\/arm-trustzone-technology .  ARM Limited. 2018. ARM TrustZone Technology for the Armv8?M Architecture (Version 2.1) . https:\/\/developer.arm.com\/products\/architecture\/cpu-architecture\/m-profile\/docs\/100690\/latest\/arm-trustzone-technology ."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/3026877.3026930"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/646766.704152"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/2685048.2685070"},{"key":"e_1_3_2_1_9_1","volume-title":"Trust Issues: Exploiting TrustZone TEEs . https:\/\/googleprojectzero.blogspot.com\/2017\/07\/trust-issues-exploiting-trustzone-tees.html .","author":"Beniamini Gal","year":"2017","unstructured":"Gal Beniamini . 2017 . Trust Issues: Exploiting TrustZone TEEs . https:\/\/googleprojectzero.blogspot.com\/2017\/07\/trust-issues-exploiting-trustzone-tees.html . Gal Beniamini. 2017. Trust Issues: Exploiting TrustZone TEEs . https:\/\/googleprojectzero.blogspot.com\/2017\/07\/trust-issues-exploiting-trustzone-tees.html ."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102463"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.22"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/2534766.2534778"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3054924"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2499368.2451145"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251398.1251410"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1353536.1346284"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.30"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/3026959.3027011"},{"key":"e_1_3_2_1_19_1","volume-title":"Securing the Future of Authentication with ARM TrustZone-based Trusted Execution Environment and Fast Identity Online (FIDO) . ARM Whitepaper","author":"Coombs Rob","year":"2015","unstructured":"Rob Coombs . 2015. Securing the Future of Authentication with ARM TrustZone-based Trusted Execution Environment and Fast Identity Online (FIDO) . ARM Whitepaper ( 2015 ). Rob Coombs. 2015. Securing the Future of Authentication with ARM TrustZone-based Trusted Execution Environment and Fast Identity Online (FIDO) . ARM Whitepaper (2015)."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2654822.2541986"},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS) .","author":"Davi Lucas","year":"2012","unstructured":"Lucas Davi , Alexandra Dmitrienko , Manuel Egele , Thomas Fischer , Thorsten Holz , Ralf Hund , Stefan N\u00fcrnberger , and Ahmad-Reza Sadeghi . 2012 . MoCFI: A Framework to Mitigate Control-Flow Attacks on Smartphones . In Proceedings of the Network and Distributed System Security Symposium (NDSS) . Lucas Davi, Alexandra Dmitrienko, Manuel Egele, Thomas Fischer, Thorsten Holz, Ralf Hund, Stefan N\u00fcrnberger, and Ahmad-Reza Sadeghi. 2012. MoCFI: A Framework to Mitigate Control-Flow Attacks on Smartphones. In Proceedings of the Network and Distributed System Security Symposium (NDSS) ."},{"key":"e_1_3_2_1_22_1","unstructured":"Google. 2017a. Hardware-backed Keystore . https:\/\/source.android.com\/security\/keystore .  Google. 2017a. Hardware-backed Keystore . https:\/\/source.android.com\/security\/keystore ."},{"key":"e_1_3_2_1_23_1","unstructured":"Google. 2017b. Key and ID Attestation . https:\/\/source.android.com\/security\/keystore\/attestation .  Google. 2017b. Key and ID Attestation . https:\/\/source.android.com\/security\/keystore\/attestation ."},{"key":"e_1_3_2_1_24_1","unstructured":"Google. 2017c. Keystore Key Attestation . https:\/\/android-developers.googleblog.com\/2017\/09\/keystore-key-attestation.html .  Google. 2017c. Keystore Key Attestation . https:\/\/android-developers.googleblog.com\/2017\/09\/keystore-key-attestation.html ."},{"key":"e_1_3_2_1_25_1","unstructured":"Google. 2018. About Android App Bundles . https:\/\/developer.android.com\/guide\/app-bundle\/.  Google. 2018. About Android App Bundles . https:\/\/developer.android.com\/guide\/app-bundle\/."},{"key":"e_1_3_2_1_26_1","unstructured":"Google. 2020. Recent Android App Bundle improvements and timeline for new apps on Google Play . https:\/\/android-developers.googleblog.com\/2020\/08\/recent-android-app-bundle-improvements.html .  Google. 2020. Recent Android App Bundle improvements and timeline for new apps on Google Play . https:\/\/android-developers.googleblog.com\/2020\/08\/recent-android-app-bundle-improvements.html ."},{"key":"e_1_3_2_1_27_1","unstructured":"Google. 2021. Asylo . https:\/\/asylo.dev\/about\/overview.html .  Google. 2021. Asylo . https:\/\/asylo.dev\/about\/overview.html ."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3081333.3081349"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-6423(00)00014-9"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2499368.2451146"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/1051493"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.5555\/2831143.2831155"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.62"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243739"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2622261"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314389.1314399"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2994459.2994470"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053018"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/11532378_2"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3268935.3268938"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/384264.379237"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.5555\/3154690.3154718"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134066"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23227"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.15"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.5555\/1268299.1268322"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23349"},{"key":"e_1_3_2_1_48_1","unstructured":"Randy Nelson. 2018. Nintendo's Super Mario Run Revenue Dashes Past $60 Million Worldwide . https:\/\/sensortower.com\/blog\/super-mario-run-60-million-revenue .  Randy Nelson. 2018. Nintendo's Super Mario Run Revenue Dashes Past $60 Million Worldwide . https:\/\/sensortower.com\/blog\/super-mario-run-60-million-revenue ."},{"key":"e_1_3_2_1_49_1","unstructured":"Kyle Orland. 2017. Denuvo's DRM now being cracked within hours of release . https:\/\/arstechnica.com\/gaming\/2017\/10\/denuvos-drm-ins-now-being-cracked-within-hours-of-release .  Kyle Orland. 2017. Denuvo's DRM now being cracked within hours of release . https:\/\/arstechnica.com\/gaming\/2017\/10\/denuvos-drm-ins-now-being-cracked-within-hours-of-release ."},{"key":"e_1_3_2_1_50_1","volume-title":"Junghwan Rhee, Jong-Jin Won, Taisook Han, and Dongyan Xu.","author":"Park Sungjin","year":"2018","unstructured":"Sungjin Park , Chung Hwan Kim , Junghwan Rhee, Jong-Jin Won, Taisook Han, and Dongyan Xu. 2018 . CAFE : A Virtualization-Based Approach to Protecting Sensitive Cloud Application Logic Confidentiality . IEEE Transactions on Dependable and Secure Computing ( 2018). Sungjin Park, Chung Hwan Kim, Junghwan Rhee, Jong-Jin Won, Taisook Han, and Dongyan Xu. 2018. CAFE: A Virtualization-Based Approach to Protecting Sensitive Cloud Application Logic Confidentiality . IEEE Transactions on Dependable and Secure Computing (2018)."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1002\/sec.936"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-60876-1_4"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.38"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884817"},{"key":"e_1_3_2_1_55_1","volume-title":"An Overview of the Samsung KNOX Platform . Samsung Whitepaper","author":"Samsung Electronics Co.","year":"2015","unstructured":"Samsung Electronics Co. , Ltd. 2015. An Overview of the Samsung KNOX Platform . Samsung Whitepaper ( 2015 ). Samsung Electronics Co., Ltd. 2015. An Overview of the Samsung KNOX Platform . Samsung Whitepaper (2015)."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2654822.2541949"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23500"},{"key":"e_1_3_2_1_58_1","unstructured":"Stack Exchange. 2017. How are Apple App Store Apps encrypted? https:\/\/reverseengineering.stackexchange.com\/questions\/14704\/how-are-apple-app-store-apps-encrypted .  Stack Exchange. 2017. How are Apple App Store Apps encrypted? https:\/\/reverseengineering.stackexchange.com\/questions\/14704\/how-are-apple-app-store-apps-encrypted ."},{"key":"e_1_3_2_1_59_1","unstructured":"Statista. 2019. Gaming monetization - Statistics & Facts . https:\/\/www.statista.com\/topics\/3436\/gaming-monetization . Accessed: 2019--11--20.  Statista. 2019. Gaming monetization - Statistics & Facts . https:\/\/www.statista.com\/topics\/3436\/gaming-monetization . Accessed: 2019--11--20."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2015.11"},{"key":"e_1_3_2_1_61_1","volume-title":"TPM MOBILE with Trusted Execution Environment for Comprehensive Mobile Device Security . TCG Whitepaper","author":"Trusted Computing Group","year":"2015","unstructured":"Trusted Computing Group . 2015. TPM MOBILE with Trusted Execution Environment for Comprehensive Mobile Device Security . TCG Whitepaper ( 2015 ). Trusted Computing Group. 2015. TPM MOBILE with Trusted Execution Environment for Comprehensive Mobile Device Security . TCG Whitepaper (2015)."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.5555\/3154690.3154752"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.46"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/2995306.2995315"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_5"},{"key":"e_1_3_2_1_66_1","volume-title":"Proceedings of the IEEE International Symposium on Hardware Oriented Security and Trust (HOST) .","author":"Ye M.","unstructured":"M. Ye , J. Sherman , W. Srisa-an, and S. Wei . 2018. TZSlicer: Security-Aware Dynamic Program Slicing for Hardware Isolation . In Proceedings of the IEEE International Symposium on Hardware Oriented Security and Trust (HOST) . M. Ye, J. Sherman, W. Srisa-an, and S. Wei. 2018. TZSlicer: Security-Aware Dynamic Program Slicing for Hardware Isolation. In Proceedings of the IEEE International Symposium on Hardware Oriented Security and Trust (HOST) ."},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3210240.3210338"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23327"},{"key":"e_1_3_2_1_69_1","volume-title":"Proceedings of the IEEE Symposium on Security and Privacy (S&P) .","author":"Zhang Ning","unstructured":"Ning Zhang , Kun Sun , Wenjing Lou , and Y. Thomas Hou . 2016. CaSE: Cache-Assisted Secure Execution on ARM Processors . In Proceedings of the IEEE Symposium on Security and Privacy (S&P) . Ning Zhang, Kun Sun, Wenjing Lou, and Y. Thomas Hou. 2016. CaSE: Cache-Assisted Secure Execution on ARM Processors. In Proceedings of the IEEE Symposium on Security and Privacy (S&P) ."}],"event":{"name":"CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event Republic of Korea","acronym":"CCS '21","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2021 Research on offensive and defensive techniques in the Context of Man At The End (MATE) Attacks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3465413.3488571","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3465413.3488571","content-type":"text\/html","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3465413.3488571","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3465413.3488571","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:18:31Z","timestamp":1750191511000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3465413.3488571"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,15]]},"references-count":69,"alternative-id":["10.1145\/3465413.3488571","10.1145\/3465413"],"URL":"https:\/\/doi.org\/10.1145\/3465413.3488571","relation":{},"subject":[],"published":{"date-parts":[[2021,11,15]]},"assertion":[{"value":"2021-11-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}