Picking a CHERI Allocator: Security and Performance Considerations
Picking a CHERI Allocator: Security and Performance Considerations
复制标题
选择 CHERI 分配器：安全性和性能考虑因素
DOI：
10.1145/3591195.3595278
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
Bramley J
中科院分区：
文献类型：
--
作者：
Bramley J
几个开源的内存分配器已经被移植到CHERI上，这是一种硬件功能 平台在本文中，我们将检查这些 在Arm的原型Morello平台上的CheriBSD下运行时， 我们介绍了一些安全攻击，并表明，所有，但一个分配器 容易受到某些攻击-包括默认的CheriBSD分配器。 然后，我们表明，虽然某些形式的分配器性能是有意义的， 比较混合和纯能力的性能（即"磨合 非CHERI与在CHERI模式下运行"）分配器目前似乎没有意义。 虽然我们并不完全了解 这似乎至少是由于以下因素造成的， 不成熟的编译器工具链和原型硬件，因为它是由于影响 性能上的能力。
Several open-source memory allocators have been ported to CHERI, a hardware capability platform. In this paper we examine the security and performance of these allocators when run under CheriBSD on Arm's prototype Morello platform. We introduce a number of security attacks and show that all but one allocator are vulnerable to some of the attacks --- including the default CheriBSD allocator. We then show that while some forms of allocator performance are meaningful, comparing the performance of hybrid and pure capability (i.e. "running in non-CHERI vs. running in CHERI modes") allocators does not currently appear to be meaningful. Although we do not fully understand the reasons for this, it seems to be at least as much due to factors such as immature compiler toolchains and prototype hardware as it is due to the effects of capabilities on performance.
CHERI Concentrate：实用的压缩功能
影响因子：
3.7
作者：
Woodruff J
通讯作者：
Woodruff J
DOI：
--
发表时间：
2019
期刊：
影响因子：
--
作者：
R. Watson;S. Moore;Peter Sewell;P. Neumann
通讯作者：
P. Neumann