Hard edges: hardware-based Control-Flow Integrity for embedded devicesHard edges: hardware-based Control-Flow Integrity for embedded devices Πλήρης Δημοσίευση σε Συνέδριο Conference Full Paper 2024-11-262021enControl-Flow Integrity (CFI) is a popular technique to defend against State-of-the-Art exploits, by ensuring that every (indirect) control-flow transfer points to a legitimate address and it is part of the Control-flow Graph (CFG) of a program. Enabling CFI in real systems is not straightforward, since in many cases the actual CFG of a program can only be approximated. Even in the case where there is perfect knowledge of the CFG, ensuring that all return instructions will return to their actual call sites, without employing a shadow stack, is questionable. In this work, we explore the implementation of a full-featured CFI-enabled Instruction Set Architecture (ISA) on actual hardware. Our new instructions provide the finest possible granularity for both intra-function and inter-function Control-Flow Integrity. We implement hardware-based CFI (HCFI) by modifying a SPARC SoC and evaluate the prototype on an FPGA board by running SPECInt benchmarks instrumented with a fine-grained CFI policy. HCFI can effectively protect applications from code-reuse attacks, while adding less than 1% average runtime and 2% power consumption overhead, making it particularly suitable for embedded systems.This work was supported by the projects CONCORDIA, C4IIoT, Cyrene and IntellIoT, funded by the European Commission under Grant Agreements No. 830927, No. 833828, No 952690 and No. 957218.http://creativecommons.org/licenses/by/4.0/275–28721st International Conference on Embedded Computer Systems: Architectures, Modeling, and SimulationEmbedded Computer Systems: Architectures, Modeling, and Simulation Christou George Vasiliadis Giorgos Athanasopoulos, Elias Ioannidis Sotirios Ιωαννιδης Σωτηριος Springer Control-Flow Integrity (CFI) Instruction Set Architecture (ISA)