Mitigating Software Vulnerabilities with Architectural Support for Type-safety

通过类型安全的架构支持减少软件漏洞

• 批准号: 541942-2019
• 负责人: Lie, David
• 金额: $ 12.76万
• 依托单位: University of Toronto
• 依托单位国家: 加拿大
• 项目类别: Collaborative Research and Development Grants
• 财政年份: 2020
• 资助国家: 加拿大
• 起止时间: 2020-01-01 至 2021-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=699570
• 关键词: Mitigating; Software; Vulnerabilities; Architectural; Support

Security vulnerabilities occur in because of software defects (i.e. bugs) created by programmers. The defects, if triggered by an attacker, result in unintended functionality in a program. In the worst case, these defects may allow an attacker to corrupt values in program memory in a controlled way. Previous security solutions concentrate largely on software-only approaches, which can easily impose as much as 87% performance overhead. Recent attempts to provide architectural hardware support for security have been less than spectacular. Intel MPX provides hardware bounds checking of memory accesses. While MPX provides better security guarantees than software-only solutions, it performs no better, still imposing anywhere from 20-400% performance overhead. The proposed research will seek to devise and evaluate integrated hardware/software security support in central processing units (CPUs) with an aim of imposing less than 5% overhead. By tightly integrating the software and hardware components of the solution we propose a) software tools that generate code in a way that is easier for hardware to protect against attack and b) hardware that utilizes mechanisms such as caching and pre-fetching to accelerate the protection operations.

安全漏洞是由于程序员创建的软件缺陷（即错误）而发生的。 如果攻击者触发的缺陷会导致程序中的意外功能。 在最坏的情况下，这些缺陷可能会使攻击者可以以受控的方式损坏程序内存中的值。 以前的安全解决方案主要集中在仅软件的方法上，该方法很容易施加87％的性能开销。为安全提供建筑硬件支持的最新尝试并不壮观。 Intel MPX提供了内存访问的硬件界限。尽管MPX比仅限软件解决方案提供了更好的安全保证，但它的性能并没有更好，但在20-400％的性能开销中仍然构成了任何效果。 拟议的研究将寻求在中央处理单元（CPU）中设计和评估集成的硬件/软件安全支持，目的是施加少于5％的开销。 通过紧密整合解决方案的软件和硬件组件，我们建议a）软件工具，该软件工具以硬件更容易保护代码，以防止攻击和b）使用缓存和预取用机制来加速保护操作的硬件。