CoMeT: Configurable Tagged Memory Extension

Commodity processor architectures are releasing various instruction set extensions to support security solutions for the efficient mitigation of memory vulnerabilities. Among them, tagged memory extension (TME), such as ARM MTE and SPARC ADI, can prevent unauthorized memory access by utilizing tagge...

Descripción completa

Guardado en:

Detalles Bibliográficos
Autores principales:	Jinjae Lee, Derry Pratama, Minjae Kim, Howon Kim, Donghyun Kwon
Formato:	article
Lenguaje:	EN
Publicado:	MDPI AG 2021
Materias:	memory isolation tagged memory Chemical technology TP1-1185
Acceso en línea:	https://doaj.org/article/ccd982a022c645d29e8a8bf1600fa765
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

id	oai:doaj.org-article:ccd982a022c645d29e8a8bf1600fa765
record_format	dspace
spelling	oai:doaj.org-article:ccd982a022c645d29e8a8bf1600fa7652021-11-25T18:59:11ZCoMeT: Configurable Tagged Memory Extension10.3390/s212277711424-8220https://doaj.org/article/ccd982a022c645d29e8a8bf1600fa7652021-11-01T00:00:00Zhttps://www.mdpi.com/1424-8220/21/22/7771https://doaj.org/toc/1424-8220Commodity processor architectures are releasing various instruction set extensions to support security solutions for the efficient mitigation of memory vulnerabilities. Among them, tagged memory extension (TME), such as ARM MTE and SPARC ADI, can prevent unauthorized memory access by utilizing tagged memory. However, our analysis found that TME has performance and security issues in practical use. To alleviate these, in this paper, we propose CoMeT, a new instruction set extension for tagged memory. The key idea behind CoMeT is not only to check whether the tag values in the address tag and memory tag are matched, but also to check the access permissions for each tag value. We implemented the prototype of CoMeT on the RISC-V platform. Our evaluation results confirm that CoMeT can be utilized to efficiently implement well-known security solutions, i.e., shadow stack and in-process isolation, without compromising security.Jinjae LeeDerry PratamaMinjae KimHowon KimDonghyun KwonMDPI AGarticlememory isolationtagged memoryChemical technologyTP1-1185ENSensors, Vol 21, Iss 7771, p 7771 (2021)
institution	DOAJ
collection	DOAJ
language	EN
topic	memory isolation tagged memory Chemical technology TP1-1185
spellingShingle	memory isolation tagged memory Chemical technology TP1-1185 Jinjae Lee Derry Pratama Minjae Kim Howon Kim Donghyun Kwon CoMeT: Configurable Tagged Memory Extension
description	Commodity processor architectures are releasing various instruction set extensions to support security solutions for the efficient mitigation of memory vulnerabilities. Among them, tagged memory extension (TME), such as ARM MTE and SPARC ADI, can prevent unauthorized memory access by utilizing tagged memory. However, our analysis found that TME has performance and security issues in practical use. To alleviate these, in this paper, we propose CoMeT, a new instruction set extension for tagged memory. The key idea behind CoMeT is not only to check whether the tag values in the address tag and memory tag are matched, but also to check the access permissions for each tag value. We implemented the prototype of CoMeT on the RISC-V platform. Our evaluation results confirm that CoMeT can be utilized to efficiently implement well-known security solutions, i.e., shadow stack and in-process isolation, without compromising security.
format	article
author	Jinjae Lee Derry Pratama Minjae Kim Howon Kim Donghyun Kwon
author_facet	Jinjae Lee Derry Pratama Minjae Kim Howon Kim Donghyun Kwon
author_sort	Jinjae Lee
title	CoMeT: Configurable Tagged Memory Extension
title_short	CoMeT: Configurable Tagged Memory Extension
title_full	CoMeT: Configurable Tagged Memory Extension
title_fullStr	CoMeT: Configurable Tagged Memory Extension
title_full_unstemmed	CoMeT: Configurable Tagged Memory Extension
title_sort	comet: configurable tagged memory extension
publisher	MDPI AG
publishDate	2021
url	https://doaj.org/article/ccd982a022c645d29e8a8bf1600fa765
work_keys_str_mv	AT jinjaelee cometconfigurabletaggedmemoryextension AT derrypratama cometconfigurabletaggedmemoryextension AT minjaekim cometconfigurabletaggedmemoryextension AT howonkim cometconfigurabletaggedmemoryextension AT donghyunkwon cometconfigurabletaggedmemoryextension
_version_	1718410490558808064

CoMeT: Configurable Tagged Memory Extension

Ejemplares similares