Architectural Support for Software-Defined Metadata Processing
Architectural Support for Software-Defined Metadata Processing
复制标题
软件定义元数据处理的架构支持
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
A. DeHon
中科院分区：
文献类型：
--
作者：
Udit Dhawan;Cătălin Hriţcu;Raphael Rubin;N. Vasilakis;S. Chiricescu;Jonathan M. Smith;T. Knight;B. Pierce;A. DeHon
用于传播和检查软件可编程元数据标签的优化硬件可以实现低运行时开销。我们通过考虑在任意大小和复杂性的元数据上支持软件定义策略的通用架构来推广先前在硬件标记方面的工作；我们介绍了几个新的微架构优化，以保持这种丰富处理的开销较低。因此，我们的模型既具有以往基于硬件的方法的效率，又具有基于软件的方法的灵活性。我们通过使用它来执行四种不同的安全和安全策略来演示这一点——空间和时间内存安全、污染跟踪、控制流完整性以及代码和数据分离——以及同时执行所有这些策略的组合策略。使用pump增强的RISC处理器在SPEC CPU2006基准测试上进行的实验显示，对运行时间（通常低于10%）和功率上限（低于10%）的影响不大，而作为回报，能源使用（通常低于60%）和片上存储结构面积（110%）有所增加。
Optimized hardware for propagating and checking software-programmable metadata tags can achieve low runtime overhead. We generalize prior work on hardware tagging by considering a generic architecture that supports software-defined policies over metadata of arbitrary size and complexity; we introduce several novel microarchitectural optimizations that keep the overhead of this rich processing low. Our model thus achieves the efficiency of previous hardware-based approaches with the flexibility of the software-based ones. We demonstrate this by using it to enforce four diverse safety and security policies---spatial and temporal memory safety, taint tracking, control-flow integrity, and code and data separation---plus a composite policy that enforces all of them simultaneously. Experiments on SPEC CPU2006 benchmarks with a PUMP-enhanced RISC processor show modest impact on runtime (typically under 10%) and power ceiling (less than 10%), in return for some increase in energy usage (typically under 60%) and area for on-chip memory structures (110%).