arrow
返回

CToMP: a cycle-task-oriented memory protection scheme for unmanned systems

delete2024-05-21
delete0
PRE
AI
C
Chengyan Ma
N
Ning Xi
D
Di Lu *
Y
Yebo Feng
马
马建峰 (Jianfeng Ma)
DOI:10.1007/s11432-023-3865-0delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Memory corruption attacks (MCAs) refer to malicious behaviors of system intruders that modify the contents of a memory location to disrupt the normal operation of computing systems, causing leakage of sensitive data or perturbations to ongoing processes. Unlike general-purpose systems, unmanned systems cannot deploy complete security protection schemes, due to their limitations in size, cost and performance. MCAs in unmanned systems are particularly difficult to defend against. Furthermore, MCAs have diverse and unpredictable attack interfaces in unmanned systems, severely impacting digital and physical sectors. In this paper, we first generalize, model and taxonomize MCAs found in unmanned systems currently, laying the foundation for designing a portable and general defense approach. According to different attack mechanisms, we found that MCAs are mainly categorized into two types - return2libc and return2shellcode. To tackle return2libc attacks, we model the erratic operation of unmanned systems with cycles and then propose a cycle-task-oriented memory protection (CToMP) approach to protect control flows from tampering. To defend against return2shellcode attacks, we introduce a secure process stack with a randomized memory address by leveraging the memory pool to prevent Shellcode from being executed. Moreover, we discuss the mechanism by which CToMP resists the return-oriented programming (ROP) attack, a novel variant of return2libc attacks. Finally, we implement CToMP on CUAV V5+ with Ardupilot and Crazyflie. The evaluation and security analysis results demonstrate that the proposed approach CToMP is resilient to various MCAs in unmanned systems with low footprints and system overhead.
Keyword:
unmanned system
memory corruption attack
memory protection
system security
randomized memory address

期刊

Science China Information Sciences 封面图
Science China Information Sciences
IF:
7.6
论文数:
4.9K
被引数:
8.9K

机构

U
university of oregon
学者数:
6.5K
论文数: 6.1K
被引数: 6
X
Xidian University
学者数:
2.4W
论文数: 1.9W
被引数: 9.7K
引用论文

引用论文

Alarm calling by individual willow tits, Parus montanus
err1990-09-01
err0
PREAI
errRauno V. Alatalo; Pekka Helle
err分享
err收藏
Blockchain in surgery: are we ready for the digital revolution?
err2022-01-09
err0
errOAAI
errFrancesco Maria Carrano; Pierpaolo Sileri; Susie Batt; Nicola Di Lorenzo
err分享
err收藏
Aurora B expression directly correlates with prostate cancer malignancy and influence prostate cell proliferation
err2006-02-15
err0
PREAI
errPaolo Chieffi; Laura Cozzolino; Annamaria Kisslinger; Silvana Libertini; Stefania Staibano; Gelsomina Mansueto; Gaetano De Rosa; Antonia Villacci; Mario Vitale; Spiros Linardopoulos; Giuseppe Portella; Donatella Tramontano
err分享
err收藏
学者 查看更多内容