ITR-SY: System Hardening through Security Aware Compilation and Processor Architecture

联网的计算机系统容易受到恶意攻击。这些攻击通过将处理器程序计数器(PC)重新指向攻击者的代码来接管对受害者计算机系统的控制。该提案探讨了安全意识编译和处理器微体系结构在防止未经授权的PC修改方面的作用。PC危害的两个最常见的实例源于(1)激活记录中的返回地址和(2)函数指针的损坏。保护PC的基本方法是在任何潜在的PC值(如返回地址或函数指针表条目)存储到任何内存位置(如数据或堆空间中的堆栈帧或函数指针表)之前应用编码函数。任何将内存值读入PC的操作都必须首先通过解码功能。受损的PC值将只通过解码功能，因此将使恶意攻击无效。这项研究调查了PC编解码方案的几种变体，并评估了这些方案的计算开销及其有效性。本研究计划构建一个坚固的LINUX系统、GCC编译器和其他公共域实用程序，如整合了所提出的返回地址和函数指针保护方案的APACHE Web服务器。

Networked computer systems are vulnerable to malicious attack. These attackstry to take over the control of a victim computer system by re-pointing the processor program counter (PC) to the attacker's code. This proposal explores a role for security aware compilation and processor microarchitecture in preventing unauthorized PC modifications. The two most common instances of PC compromise arise from the corruption of (1) the return address in an activation record and (2) function pointers. The basic approach to guarding PC is to apply an encoding function before any potential PC value (such as return address, or function pointer table entry) is stored in any memory location (such as a stack frame or function pointer table in the data or heap space). Any read of a memory value into the PC first has to go through a decoding function. A compromised PC value would go only through the decoding function and hence would render the malicious attack ineffective. This research investigates several variations of PC encoding/decoding schemes and evaluates computational overhead of these schemes and their effectiveness. This research plans to build a hardened Linux system, gcc compiler and other public domain utilities such as Apache web server incorporating the proposed return address and function pointer protection schemes.