Deconstructing Hardware Architectures for Security
Deconstructing Hardware Architectures for Security
复制标题
解构安全硬件架构
DOI：
--
复制
发表时间：
2006
期刊：
影响因子：
--
通讯作者：
Christos Kozyrakis
中科院分区：
文献类型：
--
作者：
Michael Dalton;Hari Kannan;Christos Kozyrakis
研究人员最近提出了新的硬件架构，以提高系统的安全性。所提出的架构解决安全威胁，如缓冲区溢出，格式字符串错误，和信息泄露。硬件支持的主要优点是增加了对系统状态的可见性，降低了安全检查的开销，并且在某些情况下，与传统二进制文件兼容。然而，硬件支持并不是系统安全的灵丹妙药。我们审查两个体系结构，防止内存损坏和两个防止信息泄漏。我们确定这些设计中的重大漏洞和缺点。我们还讨论了解决方案和缓解策略。
Researchers have recently proposed novel hardware architectures for enhancing system security. The proposed architectures address security threats such as buffer overflows, format string bugs, and information disclosure. The main advantage of hardware support is increased visibility into system state, low overheads for security checks, and, in some cases, compatibility with legacy binaries. Nevertheless, hardware support is not a panacea for system security. We review two architectures for preventing memory corruption and two for preventing information leaks. We identify significant vulnerabilities and shortcomings in these designs. We also discuss solutions and mitigation strategies.