CPP: A lightweight memory page management extension to prevent code pointer leakage

doi:10.1016/j.sysarc.2022.102679

Return

CPP: A lightweight memory page management extension to prevent code pointer leakage

2022-09-01

DOI：10.1016/j.sysarc.2022.102679

Original

Save

View PDF

Abstract

En 中文

Protecting code pointers (e.g., return address, function pointer) from leakage is desirable from a security perspective. Isolation mechanisms have been the favored candidate to protect code pointers. However, these mechanisms result in significant performance overhead as they need to instrument extra instructions for frequent permission switching or bound checking. In this paper, we propose CPP, a novel Code Pointer -only Memory Page Management to restrict attack-critical operations for code pointers by hardware. Our hardware-software co-design allows CPP mark code pointers at page granularity that requires minor hardware modification. CPP checks the legality of their operations in parallel with instruction execution. We implement a prototype system and our evaluation shows CPP can effectively mitigate the code pointer leakage attacks with less than 2.1% performance overhead.

Keywords:

System security

Hardware-software co-design

Code pointer leakage

Memory safety

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.