Matches in SemOpenAlex for { <https://semopenalex.org/work/W2996435911> ?p ?o ?g. }
- W2996435911 abstract "Code reuse attacks are still big threats to software and system security. Control flow integrity is a promising technique to defend against such attacks. However, its effectiveness has been weakened due to the inaccurate control flow graph and practical strategy to trade security for performance. In recent years, CPU vendors have integrated hardware features as countermeasures. For instance, ARM Pointer Authentication (PA in short) was introduced in ARMV8-A architecture. It can efficiently generate an authentication code for an address, which is encoded in the unused bits of the address. When the address is de-referenced, the authentication code is checked to ensure its integrity. Though there exist systems that adopt PA to harden user programs, how to effectively use PA to protect OS kernels is still an open research question. In this paper, we shed lights on how to leverage PA to protect control flows, including function pointers and return addresses, of Linux kernel. Specifically, to protect function pointers, we embed authentication code into them, track their propagation and verify their values when loading from memory or branching to targets. To further defend against the pointer substitution attack, we use the function pointer address as its context, and take a clean design to propagate the address by piggybacking it into the pointer value. We have implemented a prototype system with LLVM to identify function pointers, add authentication code and verify function pointers by emitting new machine instructions. We applied this system to Linux kernel, and solved numerous practical issues, e.g., function pointer comparison and arithmetic operations. The security analysis shows that our system can protect all function pointers and return addresses in Linux kernel." @default.
- W2996435911 created "2019-12-26" @default.
- W2996435911 creator A5020827934 @default.
- W2996435911 creator A5039734151 @default.
- W2996435911 creator A5039983338 @default.
- W2996435911 creator A5057362128 @default.
- W2996435911 creator A5087996736 @default.
- W2996435911 creator A5088790914 @default.
- W2996435911 date "2019-12-23" @default.
- W2996435911 modified "2023-09-27" @default.
- W2996435911 title "ARM Pointer Authentication based Forward-Edge and Backward-Edge Control Flow Integrity for Kernels." @default.
- W2996435911 cites W1429241971 @default.
- W2996435911 cites W1691322864 @default.
- W2996435911 cites W1816718056 @default.
- W2996435911 cites W1823377586 @default.
- W2996435911 cites W1964281299 @default.
- W2996435911 cites W1968002620 @default.
- W2996435911 cites W2004456327 @default.
- W2996435911 cites W2015083179 @default.
- W2996435911 cites W2022292029 @default.
- W2996435911 cites W2042856445 @default.
- W2996435911 cites W2059969702 @default.
- W2996435911 cites W2089448621 @default.
- W2996435911 cites W2090181646 @default.
- W2996435911 cites W2098010707 @default.
- W2996435911 cites W2106412703 @default.
- W2996435911 cites W2109219878 @default.
- W2996435911 cites W2111927651 @default.
- W2996435911 cites W2117798902 @default.
- W2996435911 cites W2121468041 @default.
- W2996435911 cites W2128171167 @default.
- W2996435911 cites W2133592286 @default.
- W2996435911 cites W2138517425 @default.
- W2996435911 cites W2162800072 @default.
- W2996435911 cites W2168843528 @default.
- W2996435911 cites W2168872572 @default.
- W2996435911 cites W2171929398 @default.
- W2996435911 cites W2172131317 @default.
- W2996435911 cites W2368550879 @default.
- W2996435911 cites W2398192538 @default.
- W2996435911 cites W2523221082 @default.
- W2996435911 cites W2579400469 @default.
- W2996435911 cites W2579632738 @default.
- W2996435911 cites W2753562754 @default.
- W2996435911 cites W2943981992 @default.
- W2996435911 cites W2945027685 @default.
- W2996435911 cites W2965270941 @default.
- W2996435911 cites W2988285367 @default.
- W2996435911 cites W2968152713 @default.
- W2996435911 hasPublicationYear "2019" @default.
- W2996435911 type Work @default.
- W2996435911 sameAs 2996435911 @default.
- W2996435911 citedByCount "0" @default.
- W2996435911 crossrefType "posted-content" @default.
- W2996435911 hasAuthorship W2996435911A5020827934 @default.
- W2996435911 hasAuthorship W2996435911A5039734151 @default.
- W2996435911 hasAuthorship W2996435911A5039983338 @default.
- W2996435911 hasAuthorship W2996435911A5057362128 @default.
- W2996435911 hasAuthorship W2996435911A5087996736 @default.
- W2996435911 hasAuthorship W2996435911A5088790914 @default.
- W2996435911 hasConcept C102379954 @default.
- W2996435911 hasConcept C111919701 @default.
- W2996435911 hasConcept C119857082 @default.
- W2996435911 hasConcept C149635348 @default.
- W2996435911 hasConcept C150202949 @default.
- W2996435911 hasConcept C153083717 @default.
- W2996435911 hasConcept C160191386 @default.
- W2996435911 hasConcept C199360897 @default.
- W2996435911 hasConcept C2777904410 @default.
- W2996435911 hasConcept C2778583558 @default.
- W2996435911 hasConcept C38652104 @default.
- W2996435911 hasConcept C41008148 @default.
- W2996435911 hasConcept C553261973 @default.
- W2996435911 hasConcept C7263679 @default.
- W2996435911 hasConcept C9390403 @default.
- W2996435911 hasConcept C97686452 @default.
- W2996435911 hasConceptScore W2996435911C102379954 @default.
- W2996435911 hasConceptScore W2996435911C111919701 @default.
- W2996435911 hasConceptScore W2996435911C119857082 @default.
- W2996435911 hasConceptScore W2996435911C149635348 @default.
- W2996435911 hasConceptScore W2996435911C150202949 @default.
- W2996435911 hasConceptScore W2996435911C153083717 @default.
- W2996435911 hasConceptScore W2996435911C160191386 @default.
- W2996435911 hasConceptScore W2996435911C199360897 @default.
- W2996435911 hasConceptScore W2996435911C2777904410 @default.
- W2996435911 hasConceptScore W2996435911C2778583558 @default.
- W2996435911 hasConceptScore W2996435911C38652104 @default.
- W2996435911 hasConceptScore W2996435911C41008148 @default.
- W2996435911 hasConceptScore W2996435911C553261973 @default.
- W2996435911 hasConceptScore W2996435911C7263679 @default.
- W2996435911 hasConceptScore W2996435911C9390403 @default.
- W2996435911 hasConceptScore W2996435911C97686452 @default.
- W2996435911 hasLocation W29964359111 @default.
- W2996435911 hasOpenAccess W2996435911 @default.
- W2996435911 hasPrimaryLocation W29964359111 @default.
- W2996435911 hasRelatedWork W1533125894 @default.
- W2996435911 hasRelatedWork W2035833345 @default.
- W2996435911 hasRelatedWork W2404678703 @default.
- W2996435911 hasRelatedWork W2751885091 @default.
- W2996435911 hasRelatedWork W2752102063 @default.