CSR: Small: Repurposing Spatial Memory Safety Support in Commodity Processors for Temporal Memory Safety, Other Program Analyses, Hardware-Accelerated Data Structures, and More

CSR：小：重新利用商品处理器中的空间内存安全支持，以实现临时内存安全、其他程序分析、硬件加速数据结构等

• 批准号: 1814430
• 负责人: Dongyoon Lee
• 金额: $ 50万
• 依托单位: Virginia Polytechnic Institute and State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-07-01 至 2020-05-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1814430&HistoricalAwards=false
• 关键词: CSR; Small; Repurposing; Spatial; Memory

In every generation of computer hardware, researchers and practitioners have found uses for hardware features that their designers did not anticipate. The project aims to find new ways to adapt special-purpose hardware for general and multiple ends, using Intel's Memory Protection Extensions (MPX) as a proof of concept. Intel's designers intended MPX to be used to improve software security by ensuring an important property called spatial memory safety. The project investigates many other surprising uses for MPX.The project explores the idea of viewing special-purpose "hardware" as general-purpose hardware-accelerated "software". In particular, the project aims to repurpose MPX for three broader uses, beyond its original specialized hardware support for spatial memory safety. First, a technique to transparently augment temporal memory safety on top of MPX will be studied to ensure full memory safety. Second, a novel dynamic program analysis framework, which repurposes the MPX as a general-purpose metadata store, will be designed and developed. Last, the project will investigate the potential of MPX as a general-purpose hardware-accelerated data structure.The project will impact both current and future researchers, practitioners, and students. The project will unlock the full potential of Intel's special-purpose hardware, explore the limitations of its instruction set architecture, and thus help design next-generation processors powered by more general-purpose features. These next-generation processors will enable more secure, reliable, and performant software. New undergraduate course modules will be developed to integrate research discovery with teaching. A K-12 summer class will be offered as an outreach and diversity program. The project also includes a plan to offer a program analysis workshop for non-computer scientists to support the broader research community.The project's main results will be software prototypes and hardware simulations, along with benchmarks, documentation, and research papers. The source code, benchmark applications, and documentation will be made publicly available on GitHub. The papers will be available on the dedicated project website as well. The project repository will be maintained for at least five years beyond the end of the project. All of these resources will be available from the project web page: http://research.cs.vt.edu/gpx.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

在每一代计算机硬件中，研究人员和从业人员都发现了设计师没有预料的硬件功能的用途。 该项目旨在使用英特尔的内存保护扩展（MPX）作为概念证明，以找到新的方法，以适应一般和多端的特殊用途硬件。英特尔的设计师打算通过确保称为“空间内存安全性”的重要属性来用于改善软件安全性。该项目研究了MPX的许多其他令人惊讶的用途。该项目探讨了将特殊用途“硬件”视为通用硬件加速“软件”的想法。特别是，该项目旨在重新利用MPX，以换取三种更广泛的用途，而不是其原始的专业硬件支持用于空间记忆安全。首先，将研究一种在MPX之上透明地增强时间记忆安全的技术，以确保全部记忆安全。其次，将设计和开发一个新颖的动态程序分析框架，该框架将MPX重新利用为通用元数据商店。最后，该项目将研究MPX作为通用硬件加速数据结构的潜力。该项目将影响当前和未来的研究人员，从业人员和学生。该项目将释放英特尔特殊实用性硬件的全部潜力，探索其指令集架构的局限性，从而帮助设计下一代处理器，并由更通用的功能供电。这些下一代处理器将启用更安全，可靠和性能的软件。将开发新的本科课程模块，以将研究发现与教学整合。 K-12夏季课程将作为外展和多样性计划提供。该项目还包括一个计划，为非计算机科学家提供计划分析研讨会，以支持更广泛的研究社区。该项目的主要结果将是软件原型和硬件模拟，以及基准，文档和研究论文。源代码，基准应用程序和文档将在GitHub上公开提供。这些论文也将在专用项目网站上提供。该项目存储库将在项目结束之前至少维护五年。所有这些资源将从项目网页上获得：http：//research.cs.vt.edu/gpx.this Trawe反映了NSF的法定任务，并认为使用基金会的知识分子优点和更广泛的影响审查标准，认为值得通过评估来获得支持。

项目成果

PeX: A Permission Check Analysis Framework for Linux Kernel

• 发表时间: 2019
• 作者: Tong Zhang;Wenbo Shen;Dongyoon Lee;Changhee Jung;Ahmed M. Azab;Ruowen Wang

Why aren’t regular expressions a lingua franca? an empirical study on the re-use and portability of regular expressions

• DOI: 10.1145/3338906.3338909
• 发表时间: 2019-08
• 期刊: Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering
• 作者: James C. Davis;IV LouisG.Michael;Christy A. Coghlan;Francisco Servant;Dongyoon Lee

BOGO: Buy Spatial Memory Safety, Get Temporal Memory Safety (Almost) Free

• DOI: 10.1145/3297858.3304017
• 发表时间: 2019-04
• 期刊: Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems
• 作者: T. Zhang;Dongyoon Lee;Changhee Jung

The impact of regular expression denial of service (ReDoS) in practice: an empirical study at the ecosystem scale

• DOI: 10.1145/3236024.3236027
• 发表时间: 2018-10
• 期刊: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering
• 作者: James C. Davis;Christy A. Coghlan;Francisco Servant;Dongyoon Lee

Compiler-directed soft error resilience for lightweight GPU register file protection

• DOI: 10.1145/3385412.3386033
• 发表时间: 2020-06
• 期刊: Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation
• 作者: Hongjune Kim;Jianping Zeng;Qingrui Liu;Mohammad Abdel-Majeed;Jaejin Lee;Changhee Jung