Memory sensitive data encryption protection system based on hardware tag

Abstract

The invention discloses a memory sensitive data encryption protection system based on a hardware tag. The system comprises a hardware tag architecture, a hardware encryption module and a system support module. The hardware tag architecture dynamically tracks sensitive data through a tag instruction and a tag clear instruction; additionally expanding tag storage in an on-chip cache or a register, and modifying an assembly line to allow tags to be propagated from an affiliated source register to a target register in processor operation; a label cache is constructed between the off-chip cache and the off-chip memory and used for reducing the load overhead when data and labels need to be taken from the off-chip memory; the hardware encryption module encrypts and decrypts sensitive data entering and exiting the chip; and the system support module provides support for the hardware tag architecture and the hardware encryption module. The system disclosed by the invention can efficiently protect sensitive data in a program memory from being leaked in a fine-grained and high-robustness manner.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a memory sensitive data encryption protection system based on hardware tags. Background technique [0002] In recent years, with the popularity of computing devices, sensitive data leakage attacks have become rampant. Traditional means of defending against control flow hijacking attacks such as stack cookie, DEP, and address space randomization cannot defend against leaking attacks based on data flow alone. Steal keys and cause great harm. [0003] The performance penalty when running Dataflow Integrity Protection is prohibitive, making it difficult to deploy. For this reason, a selective data protection (selective data protection) strategy proposes that only important data objects in memory can be protected instead of all data objects. Some new systems implement this strategy by requiring developers to flag sensitive variables and statically analyze a...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the problems of large error, weak scalability and insufficient performance of the existing selective sensitive data protection technology, the present invention provides a memory sensitive data encryption protection system based on hardware tags, and the specific technical scheme is as follows:

Images