当前位置：网站首页>Research on system and software security (I)
Research on system and software security (I)
2022-04-23 08:01:00 【Xihang】
Holistic Control-Flow Protection on Real-Time Embedded Systems with Kage
usenix secrity 2022
abstract
This paper presents Kage: a system that protects the control data of both application and kernel code on microcontroller-based embedded systems.
Kage consists of a Kage-compliant embedded OS that stores all control data in seqarate memory regions from untrusted data, a compiler that transforms code to protect these memory regions efficiently and to add forwardedge control-flow integrity checks, and a secure API that allows safe updates to the protectd data.
We implemented Kage as an extension to FreeRTOS, an embedded real-time operating system. We evaluated Kage’s performance using the CoreMark benchmark.
Kage incurred a 5.2% average run-time overhead and 49.8% code size overhead.
Further
版权声明
本文为[Xihang]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/04/202204230625153737.html
边栏推荐
猜你喜欢
Buctf MISC brossage
SAP self created table log function is enabled
SAP GUI security
Redis--为什么字符串emstr的字符串长度是44字节上限？
C ＃ control the camera, rotate and drag the observation script (similar to scenes observation mode)
Unity获取真实地理地图应用Terrain笔记
Houdini ＞ variable building roads, learning process notes
内网渗透系列：内网隧道之dns2tcp
庄懂的TA笔记（六）＜FakeEnvReflect ＆＆ 生锈，锈迹效果＞
内网渗透系列：内网隧道之pingtunnel
随机推荐
KCD_ EXCEL_ OLE_ TO_ INT_ Convert reports an error sy subrc = 2
《内网安全攻防：渗透测试实战指南》读书笔记（五）：域内横向移动分析及防御
Houdini ＞ variable building roads, learning process notes
VBA calls SAP RFC to read & write data
常用Markdown语法学习
Towords Open World Object Detection
Internal network security attack and defense: a practical guide to penetration testing (VII): cross domain attack analysis and defense
Internal network security attack and defense: a practical guide to penetration testing (8): Authority maintenance analysis and defense
CTF-MISC总结
TA notes of Zhuang understand (zero) < bedding and learning methods >
《内网安全攻防：渗透测试实战指南》读书笔记（七）：跨域攻击分析及防御
聊聊接口幂等与消费幂等的本质
Personality charm of high paid it workers
内网渗透系列：内网隧道之icmptunnel（jamesbarlow师傅的）
Houdini流体＞＞粒子流体导出到unity笔记
The projection vector of a vector to a plane
C＃控制相机，旋转，拖拽观察脚本(类似Scenes观察方式)
【编程实践/嵌入式比赛】嵌入式比赛学习记录（一）：TCP服务器和web界面的建立
Gets the maximum getmaxpoint in the list of all points
【编程实践/嵌入式比赛】嵌入式比赛学习记录（二）：基于TCP的图片流传输