TZmCFI: RTOS-Aware Control-Flow Integrity Using TrustZone for Armv8-M
TZmCFI: RTOS-Aware Control-Flow Integrity Using TrustZone for Armv8-M
复制标题
DOI：
10.1007/s10766-020-00673-z
复制
发表时间：
2020-07-27
影响因子：
1.5
通讯作者：
Takada, Hiroaki
中科院分区：
文献类型：
--
作者：
Kawada, Tomoaki;Honda, Shinya;Takada, Hiroaki
控制流完整性(CFI)是一类针对控制流攻击的防御技术，例如面向返回的编程。我们提出了一种基于RTOS的轻量级CFI方案TZmCFI，该方案利用ARMv8-M的TrustZone，这是一种硬件辅助的安全特性，适用于资源紧张的嵌入式系统。TZmCFI包含了几种现有的CFI技术，提供了全面的保护。传统的影子堆栈技术用于确保堆栈的完整性和验证函数返回。为了保护异常处理程序，TZmCFI扩展了影子异常堆栈，这是我们在之前的工作中提出的传统影子堆栈技术的变体，用于RTOS的集成和性能改进。我们在ARM通用Express Cortex-M原型系统(V2M-MPS2+)上进行了实验，以评估该系统的运行时间开销。
Control-Flow Integrity (CFI) is a class of defensive techniques against control-flow attacks such as Return-Oriented Programming. We propose a light-weight CFI scheme for RTOS-based applications, TZmCFI, which utilizes TrustZone for Armv8-M, a hardware-assisted security feature for embedded systems with tight resource constraints. TZmCFI embodies several existing CFI techniques to provide a comprehensive protection. The traditional shadow stack technique is used to ensure stack integrity and validate function returns. To protect exception handlers, TZmCFI extendsshadow exception stacks, which are a variant of the traditional shadow stack technique we proposed in our previous work, for RTOS integration and performance improvement. We conducted an experiment on Arm Versatile Express Cortex-M Prototyping System (V2M-MPS2+) to evaluate the run-time overhead of the proposed system.