标题： 高通可信应用程序模糊测试模拟 显示英文标题

标题： Qualcomm Trusted Application Emulation for Fuzzing Testing

摘要： 近年来，对网络安全意识的提高促使人们更加关注硬件设备和产品中的信息安全。将可信执行环境（TEEs）纳入产品设计已成为保护敏感用户信息的标准做法。然而，这些组件中的漏洞会带来重大风险，如果被攻击者利用，这些漏洞可能导致敏感数据泄露，从而损害用户隐私和安全。本研究聚焦于高通TEE中的可信应用（TAs），并介绍了一种专门为此类应用设计的新模拟器。通过逆向工程技术，我们对高通TAs进行了全面分析，并开发了一个部分模拟环境，能够准确模拟其行为。此外，我们将模糊测试技术集成到模拟器中，系统地发现高通TAs中的潜在漏洞，展示了其在识别现实世界安全缺陷方面的实际有效性。本研究做出了重要贡献，成为首个提供高通TAs模拟器的实现方法和源代码的研究，为未来的研究工作提供了有价值的参考。与之前依赖复杂且资源密集的全系统仿真方法不同，我们的方法轻量且有效，使TA的安全测试更加方便。 显示英文摘要

摘要： In recent years, the increasing awareness of cybersecurity has led to a heightened focus on information security within hardware devices and products. Incorporating Trusted Execution Environments (TEEs) into product designs has become a standard practice for safeguarding sensitive user information. However, vulnerabilities within these components present significant risks, if exploited by attackers, these vulnerabilities could lead to the leakage of sensitive data, thereby compromising user privacy and security. This research centers on trusted applications (TAs) within the Qualcomm TEE and introduces a novel emulator specifically designed for these applications. Through reverse engineering techniques, we thoroughly analyze Qualcomm TAs and develop a partial emulation environment that accurately emulates their behavior. Additionally, we integrate fuzzing testing techniques into the emulator to systematically uncover potential vulnerabilities within Qualcomm TAs, demonstrating its practical effectiveness in identifying real-world security flaws. This research makes a significant contribution by being the first to provide both the implementation methods and source codes for a Qualcomm TAs emulator, offering a valuable reference for future research efforts. Unlike previous approaches that relied on complex and resource-intensive full-system simulations, our approach is lightweight and effective, making security testing of TA more convenient.