Demystifying Soft-Error Mitigation by Control-Flow Checking -- A New Perspective on its Effectiveness
Demystifying Soft-Error Mitigation by Control-Flow Checking -- A New Perspective on its Effectiveness
复制标题
通过控制流检查揭开软错误缓解的神秘面纱——对其有效性的新视角
DOI：
10.1145/3126503
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
W. Schröder-Preikschat
中科院分区：
文献类型：
--
作者：
S. Schuster;P. Ulbrich;I. Stilkerich;C. Dietrich;W. Schröder-Preikschat
软错误是安全关键嵌入式系统领域中一个具有挑战性和紧迫性的问题。几十年来，人们一直在研究和改进检查方案，以减轻控制流故障类的软错误影响，当前的工业标准强烈推荐使用它们。然而，现实情况却有所不同：从系统的角度来看，我们实现了四种代表性的控制流检查（CFC）方案，并在396个故障注入活动中对其进行了测试。与以前的工作，这通常依赖于基于概率的漏洞度量，我们占内存和时间开销的影响，故障空间的尺寸和应用在全扫描故障注入。这一变化的过程本身严重降低了感知的有效性CFC.In此外，我们扩大了数据流故障及其对整体易感性的影响，这方面到目前为止已在很大程度上被忽视的角度来看。我们的研究结果表明，如果没有相应的措施，控制流故障的任何改进都是由内存和运行时开销增加的攻击面所引起的数据故障的增加所主导的。此外，CFC的性能依赖于检测能力比一般方面的具体二进制compilation and execution.In结论，将CFC是不简单的，因为往往假设和脆弱性的系统与硬化控制流在许多情况下，甚至可能会增加计划本身。
Soft errors are a challenging and urging problem in the domain of safety-critical embedded systems. For decades, checking schemes have been investigated and improved to mitigate soft-error effects for the class of control-flow faults, with current industrial standards strongly recommending their use.However, reality looks different: Taking a systems perspective, we implemented four representative Control-Flow Checking (CFC) schemes and put them through their paces in 396 fault-injection campaigns. In contrast to previous work, which typically relied on probability-based vulnerability metrics, we accounted for the influence of memory and time overheads on the fault-space dimensions and applied those in full-scan fault injections. This change in procedure alone severely degraded the perceived effectiveness of CFC.In addition, we expanded the perspective to data-flow faults and their influence on the overall susceptibility, an aspect that so far has been largely ignored. Our results suggest that, without accompanying measures, any improvement regarding control-flow faults is dominated by the increase in data faults caused by the increased attack surface in terms of memory and runtime overhead. Moreover, CFC performance less depended on the detection capabilities than on general aspects of the concrete binary compilation and execution.In conclusion, incorporating CFC is not as straightforward as often assumed and the vulnerability of systems with hardened control-flow may in many cases even be increased by the schemes themselves.
登录
查看更多内容
I4Copter：适应性强的模块化四旋翼平台
DOI：
--
发表时间：
2011
期刊：
ACM Symposium on Applied Computing
影响因子：
--
作者：
Peter Ulbrich;R. Kapitza;C. Harkort;Reiner N. Schmid;Wolfgang Schröder
通讯作者：
Wolfgang Schröder
避免基于故障注入的程序对软错误的敏感性比较中的陷阱
DOI：
--
发表时间：
2015
期刊：
2015 45th Annual IEEE/IFIP International Conference on Dependable Systems and Networks
影响因子：
--
作者：
Horst Schirmeier;C. Borchert;O. Spinczyk
通讯作者：
O. Spinczyk
基于软件的强化对于实时操作系统中辐射引起的软错误的有效性
影响因子：
5.4
作者：
Thiago Santini;C. Borchert;Christian J. Dietrich;Horst Schirmeier;Martin Hoffmann;O. Spinczyk;Daniel Lohmann;F. Wagner;P. Rech
通讯作者：
P. Rech
DOI：
10.1145/945885.945892
发表时间：
2003-11
期刊：
ACM Trans. Program. Lang. Syst.
影响因子：
--
作者：
Jong-Deok Choi;Manish Gupta;M. Serrano;V. Sreedhar;S. Midkiff
通讯作者：
Jong-Deok Choi;Manish Gupta;M. Serrano;V. Sreedhar;S. Midkiff
DOI：
--
发表时间：
2014
期刊：
Design Automation Conference
影响因子：
--
作者：
Aviral Shrivastava;Abhishek Rhisheekesan;Reiley Jeyapaul;Carole
通讯作者：
Carole