CT-M: Hardware Containers for Software Components - Detection and Recovery at the Hardware/Software Interface

CT-M：软件组件的硬件容器 - 硬件/软件接口的检测和恢复

• 批准号: 0831041
• 负责人: Joseph Zambreno
• 金额: $ 20万
• 依托单位: Iowa State University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2009
• 资助国家: 美国
• 起止时间: 2009-01-01 至 2013-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831041&HistoricalAwards=false
• 关键词: CT; Hardware; Containers; Software; Components

This project focuses on hardware features to improve the security of software systems.By refining the coarse-grained protections available intoday's architectures, the project will aim to protectthe integrity of individual software objects or components.The hardware mechanisms force tight controls on the execution of software components, whichprogrammers can define to be as large as entireapplications or as small as individual objects. The goal is to rapidly detect and also recover from attacks thatimproperly access memory or take over the CPU.The approach also includes hardware-supervisedrecovery, to enable systems to return to normal operation after an attack and to protect the recovery process itself from attacks.The benefits of this project include the ability to thwart a large class of attacks and the potential ofdeveloping more robust software systems in the future.Recovery, which has received somewhat less attention thanattack prevention or detection, is especially important for embedded systems that do not have the luxury of intervention by human operators.The project will be used to train graduate students and to feed material into graduate courses taught at the three participating universities. Modules will also be developed for use in K-12 education with the aim of drawing students into considering careers in computer science and engineering.

该项目重点关注硬件功能，以提高软件系统的安全性。通过完善当今架构可用的粗粒度保护，该项目的目标是保护单个软件对象或组件的完整性。硬件机制强制对软件的执行进行严格控制组件，程序员可以将其定义为大到整个应用程序或小到单个对象。目标是快速检测并从不正确访问内存或接管 CPU 的攻击中恢复。该方法还包括硬件监督恢复，使系统在受到攻击后能够恢复正常运行，并保护恢复过程本身免受攻击。该项目的好处包括能够阻止大量攻击，以及在未来开发更强大的软件系统的潜力。与攻击预防或检测相比，恢复受到的关注要少一些，但对于不具有攻击防御或检测功能的嵌入式系统来说尤其重要。人工干预的奢侈。该项目将用于培训研究生，并为三所参与大学教授的研究生课程提供材料。还将开发用于 K-12 教育的模块，目的是吸引学生考虑计算机科学和工程领域的职业。