Hardware-assisted code-reuse-attack-resistant defence system and method

Abstract

The invention discloses a hardware-assisted code-reuse-attack-resistant defence system and method, wherein the defence system comprises a pre-processing module, a cache, a memory, a CPU and an encryption and decryption architecture; and the encryption and decryption architecture comprises a PUF module, a first key register, a first length register, a second key register, a second length register,a PUF encryption module, a Hamming distance coding module, a Hamming distance decoding module, a decompression module and a judgment module. According to the hardware-assisted code-reuse-attack-resistant defence system and method disclosed by the invention, the ROP attack is resisted by utilizing and matching the Hamming distance between the return address of a program and a key; because the Hamming distance is coded, the security problem that an attacker can guess a key generated by the PUF module in a plaintext attack manner in the past work can be eliminated; therefore, the security is high; simultaneously, an instruction-level data hiding technology is applied to JOP attack defence; therefore, the performance cost is low; an instruction set does not need to be changed; the universalityis good; and the security is high.

Description

technical field [0001] The invention belongs to the technical field of software security, in particular to a hardware-assisted anti-code reuse attack defense system and method. Background technique [0002] The current popular code reuse attacks are mainly divided into ROP attacks and JOP attacks according to the different endings of the constructed code fragments. The ROP attack mainly ends with the ret instruction, and the JOP attack ends with the jmp instruction. Since Hovav Shacham proposed code reuse attack and proved that ROP attack is Turing complete in 2007, more and more researchers have begun to conduct in-depth research on code reuse attack and proposed many defense mechanisms. These defense mechanisms are mainly divided into two categories: software-based defense mechanisms and hardware-assisted defense mechanisms. [0003] (1) Software-based defense technology [0004] In 2009, Davi et al. proposed a new tool for detecting ROP: ROPdefender. ROPdefender consi...

AI Technical Summary

Problems solved by technology

[0010] In 2009, Francillon et al. proposed a defense technology to protect embedded systems from control flow attacks. This technology can protect the return address by combining stack separation technology and instruction-based memory control technology, thereby effectively preventing The control flow is maliciously tampered with, but this method needs to modify the ISA (program instruction set)

However, this mechanism has security problems such as secret key leakage.

[0014] To sum up, the performance overhead of the software-based defense mechanism is too high. Although the hardware-based defense mechanism can effectively reduce the performance overhead, it needs to modify the ISA and has security problems.

Images