.png){kind=icon}
返回
FLAShadow: A Flash-based Shadow Stack for Low-end Embedded Systems
.png){kind=icon}
PRE
AI
DOI：10.1145/3670413.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Runtime attacks are a rising threat to both low- and high-end systems with the spread of techniques such as Return-Oriented Programming (ROP), which aims at hijacking the control flow of vulnerable applications. Although several control flow integrity schemes have been proposed by both academia and the industry, the vast majority of them are not compatible with low-end embedded devices, especially the ones that lack hardware security features. In this article, we propose FLASHADow, a secure shadow stack design and implementation for low-end embedded systems, relying on zero hardware security features. The key idea is to leverage a software-based memory isolation mechanism to establish an integrity-protected memory area on the Flash of the target device, where FLASHADow can be securely maintained. FLASHADow exclusively reserves a register for maintaining the integrity of the stack pointer and also depends on a minimal trusted runtime component to avoid trusting the compiler toolchain. We evaluate an open-source implementation of FLASHADow for the MSP430 architecture, showing an average performance and memory overhead of 168.58% and 25.91%, respectively. While the average performance overhead is considered high, we show that it is application dependent and incurs less than 5% for some applications.
Keyword:
Return-oriented programming
control flow integrity
shadow stack
期刊
IF:
4.1
论文数:
896
被引数:
1.9K
机构
引用论文
.png){kind=icon}
A control method for the red-spots injury occurring on seed twines for the cultivation of makonbu Laminaria japonica.一种控制makonbu海带栽培种子麻线上发生的红斑伤害的方法。
OAAI
OAAI分享收藏分享收藏分享收藏
查看更多内容