GANDALF: A fine-grained hardware-software co-design for preventing memory attacks

التفاصيل البيبلوغرافية
العنوان: GANDALF: A fine-grained hardware-software co-design for preventing memory attacks
المؤلفون: Krishnakumar, Gnanambikai, SLPSK, Patanjali, Vairam, Prasanna Karthik, Rebeiro, Chester
سنة النشر: 2017
المجموعة: Computer Science
مصطلحات موضوعية: Computer Science - Cryptography and Security, 68M15, B.4.5, K.6.5
الوصف: Reading or writing outside the bounds of a buffer is a serious security vulnerability that has been exploited in numerous occasions. These attacks can be prevented by ensuring that every buffer is only accessed within its specified bounds. In this paper we present Gandalf, a compiler-assisted hardware extension for the OpenRISC processor that thwarts all forms of memory based attacks including buffer overflows and over-reads.The feature associates lightweight base and bound capabilities to all pointer variables, which are checked at run time by the hardware. Gandalf is transparent to the user and does not require significant OS modifications. Moreover, it achieves locality, thus resulting in small performance penalties.
Comment: 5 Pages, 2 figures, Winning entry of CSAW Embedded Security Challenge 2016, Not published elsewhere
نوع الوثيقة: Working Paper
URL الوصول: http://arxiv.org/abs/1702.07223
رقم الأكسشن: edsarx.1702.07223
قاعدة البيانات: arXiv