English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Code reuse attacks are still big threats to software and system security.Control flow integrity is a promising technique to defend against such attacks.However, its effectiveness has been weakened due to the inaccurate control flowgraph and practical strategy to trade security for performance. In recentyears, CPU vendors have integrated hardware features as countermeasures. Forinstance, ARM Pointer Authentication (PA in short) was introduced in ARMV8-Aarchitecture. It can efficiently generate an authentication code for anaddress, which is encoded in the unused bits of the address. When the addressis de-referenced, the authentication code is checked to ensure its integrity.Though there exist systems that adopt PA to harden user programs, how toeffectively use PA to protect OS kernels is still an open research question.  In this paper, we shed lights on how to leverage PA to protect control flows,including function pointers and return addresses, of Linux kernel.Specifically, to protect function pointers, we embed authentication code intothem, track their propagation and verify their values when loading from memoryor branching to targets. To further defend against the pointer substitutionattack, we use the function pointer address as its context, and take a cleandesign to propagate the address by piggybacking it into the pointer value. Wehave implemented a prototype system with LLVM to identify function pointers,add authentication code and verify function pointers by emitting new machineinstructions. We applied this system to Linux kernel, and solved numerouspractical issues, e.g., function pointer comparison and arithmetic operations.The security analysis shows that our system can protect all function pointersand return addresses in Linux kernel.

ARM Pointer Authentication based Forward-Edge and Backward-Edge Control Flow Integrity for Kernels