![Ιδρυματικό Αποθετήριο [SANDBOX]](images/dias.logo.png "Ιδρυματικό Αποθετήριο [SANDBOX]"){kind=logo}
Ιδρυματικό Αποθετήριο [SANDBOX]
Πολυτεχνείο Κρήτης
Πολυτεχνείο Κρήτης
EN
|
EL
| URI | http://purl.tuc.gr/dl/dias/73893A59-F400-4080-AEF0-B7C4503EF355 | - |
| Αναγνωριστικό | https://doi.org/10.1007/978-3-031-04580-6_18 | - |
| Αναγνωριστικό | https://link.springer.com/chapter/10.1007/978-3-031-04580-6_18 | - |
| Γλώσσα | en | - |
| Μέγεθος | 13 pages | en |
| Τίτλος | Hard edges: hardware-based Control-Flow Integrity for embedded devices | en |
| Δημιουργός | Christou George | en |
| Δημιουργός | Vasiliadis Giorgos | en |
| Δημιουργός | Athanasopoulos, Elias | en |
| Δημιουργός | Ioannidis Sotirios | en |
| Δημιουργός | Ιωαννιδης Σωτηριος | el |
| Εκδότης | Springer | en |
| Περιγραφή | This work was supported by the projects CONCORDIA, C4IIoT, Cyrene and IntellIoT, funded by the European Commission under Grant Agreements No. 830927, No. 833828, No 952690 and No. 957218. | en |
| Περίληψη | Control-Flow Integrity (CFI) is a popular technique to defend against State-of-the-Art exploits, by ensuring that every (indirect) control-flow transfer points to a legitimate address and it is part of the Control-flow Graph (CFG) of a program. Enabling CFI in real systems is not straightforward, since in many cases the actual CFG of a program can only be approximated. Even in the case where there is perfect knowledge of the CFG, ensuring that all return instructions will return to their actual call sites, without employing a shadow stack, is questionable. In this work, we explore the implementation of a full-featured CFI-enabled Instruction Set Architecture (ISA) on actual hardware. Our new instructions provide the finest possible granularity for both intra-function and inter-function Control-Flow Integrity. We implement hardware-based CFI (HCFI) by modifying a SPARC SoC and evaluate the prototype on an FPGA board by running SPECInt benchmarks instrumented with a fine-grained CFI policy. HCFI can effectively protect applications from code-reuse attacks, while adding less than 1% average runtime and 2% power consumption overhead, making it particularly suitable for embedded systems. | en |
| Τύπος | Πλήρης Δημοσίευση σε Συνέδριο | el |
| Τύπος | Conference Full Paper | en |
| Άδεια Χρήσης | http://creativecommons.org/licenses/by/4.0/ | en |
| Ημερομηνία | 2024-11-26 | - |
| Ημερομηνία Δημοσίευσης | 2021 | - |
| Θεματική Κατηγορία | Control-Flow Integrity (CFI) | en |
| Θεματική Κατηγορία | Instruction Set Architecture (ISA) | en |
| Βιβλιογραφική Αναφορά | G. Christou, G. Vasiliadis, E. Athanasopoulos and S. Ioannidis, "Hard edges: hardware-based Control-Flow Integrity for embedded devices," in Embedded Computer Systems: Architectures, Modeling, and Simulation, vol. 13227, Lecture Notes in Computer Science, A. Orailoglu, M. Jung, M. Reichenbach, Eds., Cham, Switzerland: Springer, 2022, pp. 275–287. doi: 10.1007/978-3-031-04580-6_18 | en |
Copyright © DIAS 2013
