Overview
Learn about hardware-level device isolation in Zephyr through this conference talk by Jaxson Han and Huifeng Zhang from Arm. Explore the limitations of MMU/MPU in protecting against DMA-based security vulnerabilities and discover how IOMMU/SMMU technology can enhance Zephyr's security. Understand the importance of implementing device isolation as Zephyr incorporates more DMA devices. Gain insights into the new IOMMU/SMMU Subsys framework and its potential for future extensions. Witness a live demonstration of SMMUv3 protecting memory access from a PCI AHCI device on the Arm FVP platform, showcasing practical applications of hardware-level isolation techniques.
Syllabus
Introduce Hardware-Level Device Isolation to Zephyr - Jaxson Han & Huifeng Zhang, Arm
Taught by
Linux Foundation