English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Memory-safety attacks have been one of the most critical threats againstcomputing systems. Although a wide-range of defense techniques have beendeveloped against these attacks, the existing mitigation strategies haveseveral limitations. In particular, most of the existing mitigation approachesare based on aborting or restarting the victim program when a memory-safetyattack is detected, thus making the system unavailable. This might not beacceptable in systems with stringent timing constraints, such as cyber-physicalsystems (CPS), since the system unavailability leaves the control system in anunsafe state. To address this problem, we propose CIMA -- a resilient andlight-weight mitigation technique that prevents invalid memory accesses atruntime. CIMA manipulates the compiler-generated control flow graph toautomatically detect and bypass unsafe memory accesses at runtime, therebymitigating memory-safety attacks along the process. An appealing feature ofCIMA is that it also ensures system availability and resilience of the CPS evenunder the presence of memory-safety attacks. To this end, we design ourexperimental setup based on a realistic Secure Water Treatment (SWaT) andSecure Urban Transportation System (SecUTS) testbeds and evaluate theeffectiveness and the efficiency of our approach. The experimental resultsreveal that CIMA handles memory-safety attacks effectively with low overhead.Moreover, it meets the real-time constraints and physical-state resiliency ofthe CPS under test.

Taming the War in Memory: A Resilient Mitigation Strategy Against Memory Safety Attacks in CPS