ARM64 아키텍처 기반 하드웨어 보안기술 분석 및 보안성 진단
Security Analysis of ARM64 Hardware-Based Security
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
메모리 보호 관련 기술은 수십 년간 진행되어오고 있고 프로그램의 실행 보호에 있어 중요한 기술이다. 메모리 보호를 수행하기 위해 ARM에서는 새로운 하드웨어 보안기술을 개발하였고, 실제 하드웨어에 적용되기에 이르렀다. 하지만 하드웨어 메모리 보호 기술이 적용된 하드웨어는 수가 많지 않고 아직 연구가 활발히 진행되지 않고 있다. 우리는 새로운 하드웨어 메모리 보호 기술인 Pointer Authentication Code를 실제 하드웨어에서 동작하는 방식과 과정, 그리고 보안성에 대한 진단을 수행한다. 이를 통해 앞으로의 하드웨어 보안기술의 적용 방향과 사용, 보안성에 대해 알아내고 이를 응용할 수 있을 것이다.
Abstract
Memory protection has been researched for decades for program execution protection. ARM recently developed a new hardware security feature to protect memory that was applied to real hardware. However, there are not many hardware with hardware memory protection feature and research has not been actively conducted yet. We perform diagnostics on how and how it works on real hardware, and on security, with a new hardware memory protection feature, named 'Pointer Authentication Code'. Through this research, it will be possible to find out the direction, use, and security of future hardware security technologies and apply to the program.
참고문헌 (18)
- "Pointer Authentication on ARMv8.3 Design and Analysis of the New Software Security Instructions"[URL]
- A. J. Mashtizadeh, "CCFI", Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp.941~951 (2015)
- Hans Liljestrand, "PAC it up : towards pointer integrity using ARM pointer authentication", Proceedings of the 28th USENIX Conference on Security Symposium (SEC'19), pp.177~194 (2019)
- "Project Zero: Examining Pointer Authentication on the iPhone XS"[URL]
- "Armv8.5-A Memory Tagging Extension"[URL]
- Joseph Ravichandran, "PACMAN : attacking ARM pointer authentication with speculative execution", Proceedings of the 49th Annual International Symposium on Computer Architecture (ISCA '22), pp.685~698 (2022)
- "ARMv8.3 Pointer Authentication in xnu"[URL]
- "Pointer Authentication"[URL]
- P. Nasahl, "Protecting Indirect Branches Against Fault Attacks Using ARM Pointer Authentication", 2021 IEEE International Symposium on Hardware Oriented Security and Trust (HOST), pp.68~79 (2021)
- S. Yoo, "In-Kernel Control-Flow Integrity on Commodity OSes using ARM Pointer Authentication", 31st USENIX Security Symposium, USENIX Security 2022, pp.89~106 (2022)
- A. Fanti, "Toward Register Spilling Security Using LLVM and ARM Pointer Authentication", IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 41(11), pp.3757~3766 (2022)
- R. M. Farkhani, "PTAuth: Temporal Memory Safety via Robust Points-to Authentication", 30th USENIX Security Symposium, USENIX Security 2021, pp.1037~1054 (2021)
- K. Serebryany, "AddressSanitizer: A Fast Address Sanity Checker", 2012 USENIX Annual Technical Conference, pp.309~318 (2012)
- M. T. Ibn Ziad, "ZeRØ : Zero-Overhead Resilient Operation Under Pointer Integrity Attacks", 2021 ACM, 2021, 999~1012
- M. Gallagher, "Morpheus: A Vulnerability-Tolerant Secure Architecture Based on Ensembles of Moving Target Defenses with Churn’", Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems, pp.469~484 (2019)
- Y. Li, "PACMem: Enforcing Spatial and Temporal Memory Safety via ARM Pointer Authentication", Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, pp.1901~1915 (2022)
- "Heap Feng Shui in JavaScript"[URL]
- "Documentation – Arm Developer"[URL]