.png){kind=icon}
返回
HCIC: Hardware-Assisted Control-Flow Integrity Checking
.png){kind=icon}
OA
AI
DOI：10.1109/JIOT.2018.2866164.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Recently, code reuse attacks (CRAs), such as return-oriented programming (ROP) and jump-oriented programming (JOP), have emerged as a new class of ingenious security threats. Attackers can utilize CRAs to hijack the control flow of programs to perform malicious actions without injecting any codes. Many defenses, classed into software-based and hardware-based, have been proposed. However, software-based methods are difficult to be deployed in practical systems due to high performance overhead. Hardware-based methods can reduce performance overhead but may require extending instruction set architectures (ISAs) and modifying the compiler or suffer the vulnerability of key leakage. To tackle these issues, this paper proposes a new hardware-assisted control flow checking method to resist CRAs with negligible performance overhead without extending ISAs, modifying the compiler or leaking the encryption/decryption key. The key technique involves two control flow checking mechanisms. The first one is the encrypted Hamming distances matching between the physical unclonable function (PUF) response and the return addresses, which prevents attackers from returning between gadgets so long as the PUF response is secret, thus resisting ROP attacks. The second one is the linear encryption/decryption operation (XOR) between the PUF response and the instructions at target addresses of call and jmp instructions to defeat JOP attacks. Advanced return-based full-function reuse attacks will be prevented with the dynamic key-updating method. Experimental evaluations on benchmarks demonstrate that the proposed method introduces negligible 0.95% runtime overhead and 0.78% binary size overhead on average.
Keyword:
Code reuse attacks (CRAs)
control flow integrity (CFI)
hardware-assisted security
physical unclonable function (PUF)
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
8.9
论文数:
1.4W
被引数:
7.8W
机构
引用论文
Oxygen-17 and deuterium nuclear magnetic resonance studies of the orientation of water molecules in several lyotropic liquid crystals.png)
Langmuir
LangmuirIF0
PREAI
分享收藏Provably Secure Active IC Metering Techniques for Piracy Avoidance and Digital Rights Management
PREAI
分享收藏分享收藏Catalytic Mechanism and Molecular Recognition ofE.coliUDP-3-O-(R-3-Hydroxymyristoyl)-N-acetylglucosamine Deacetylase Probed by MutagenesisBiochemistry
BiochemistryIF0
PREAI
分享收藏
查看更多内容