![Institutional Repository [SANDBOX]](images/dias.logo.png "Institutional Repository [SANDBOX]"){kind=logo}
Institutional Repository [SANDBOX]
Technical University of Crete
Technical University of Crete
EN
|
EL
| URI | http://purl.tuc.gr/dl/dias/73893A59-F400-4080-AEF0-B7C4503EF355 | - |
| Identifier | https://doi.org/10.1007/978-3-031-04580-6_18 | - |
| Identifier | https://link.springer.com/chapter/10.1007/978-3-031-04580-6_18 | - |
| Language | en | - |
| Extent | 13 pages | en |
| Title | Hard edges: hardware-based Control-Flow Integrity for embedded devices | en |
| Creator | Christou George | en |
| Creator | Vasiliadis Giorgos | en |
| Creator | Athanasopoulos, Elias | en |
| Creator | Ioannidis Sotirios | en |
| Creator | Ιωαννιδης Σωτηριος | el |
| Publisher | Springer | en |
| Description | This work was supported by the projects CONCORDIA, C4IIoT, Cyrene and IntellIoT, funded by the European Commission under Grant Agreements No. 830927, No. 833828, No 952690 and No. 957218. | en |
| Content Summary | Control-Flow Integrity (CFI) is a popular technique to defend against State-of-the-Art exploits, by ensuring that every (indirect) control-flow transfer points to a legitimate address and it is part of the Control-flow Graph (CFG) of a program. Enabling CFI in real systems is not straightforward, since in many cases the actual CFG of a program can only be approximated. Even in the case where there is perfect knowledge of the CFG, ensuring that all return instructions will return to their actual call sites, without employing a shadow stack, is questionable. In this work, we explore the implementation of a full-featured CFI-enabled Instruction Set Architecture (ISA) on actual hardware. Our new instructions provide the finest possible granularity for both intra-function and inter-function Control-Flow Integrity. We implement hardware-based CFI (HCFI) by modifying a SPARC SoC and evaluate the prototype on an FPGA board by running SPECInt benchmarks instrumented with a fine-grained CFI policy. HCFI can effectively protect applications from code-reuse attacks, while adding less than 1% average runtime and 2% power consumption overhead, making it particularly suitable for embedded systems. | en |
| Type of Item | Πλήρης Δημοσίευση σε Συνέδριο | el |
| Type of Item | Conference Full Paper | en |
| License | http://creativecommons.org/licenses/by/4.0/ | en |
| Date of Item | 2024-11-26 | - |
| Date of Publication | 2021 | - |
| Subject | Control-Flow Integrity (CFI) | en |
| Subject | Instruction Set Architecture (ISA) | en |
| Bibliographic Citation | G. Christou, G. Vasiliadis, E. Athanasopoulos and S. Ioannidis, "Hard edges: hardware-based Control-Flow Integrity for embedded devices," in Embedded Computer Systems: Architectures, Modeling, and Simulation, vol. 13227, Lecture Notes in Computer Science, A. Orailoglu, M. Jung, M. Reichenbach, Eds., Cham, Switzerland: Springer, 2022, pp. 275–287. doi: 10.1007/978-3-031-04580-6_18 | en |
Copyright © DIAS 2013
