Abstract:Real-time and embedded systems are predominantly written in C, a language that is notoriously not memory safe. This has led to widespread memory-corruption vulnerabilities in real-time embedded cyber-physical systems (CPS). This is concerning, as such devices are becoming increasingly networked with the Internet of Things (IoT) and other communication technologies (e.g., 5G), rendering them vulnerable to remote attacks. Attackers have demonstrated how memory-corruption vulnerabilities can be used to hijack program control flow to implement arbitrary attacker-controlled logic. One class of defenses that has been developed to prevent such attacks is called control-flow integrity (CFI), which applies checks at control-flow transitions to ensure the target is valid. Unfortunately, attackers have shown how to divert control flow to seemingly valid targets in an invalid and malicious sequence. This paper presents InsectACIDE, the first holistic CFI for embedded and real-time systems that does not require binary instrumentation and that is context sensitive, i.e., it checks that the sequence of control-flow transitions taken is valid, not just individual transitions, thereby detecting such attacks. InsectACIDE is implemented on an embedded Cortex-M processor using the TrustZone trusted execution environment, and holistic context-sensitive CFI is enforced for both applications and the kernel. InsectACIDE uses hardware debugging features on the Cortex-M processor and therefore does not require any kernel or application binary modification. Experimental results show that InsectACIDE incurs significantly less runtime overhead compared to the state-of-the-art holistic CFI solution. Real-time schedulability analysis is presented, along with a schedulability evaluation, to demonstrate the tradeoff between stronger protection and real-time schedulability.

Software-driven Debug Framework for Embedded RISC-V, that Transparently Emulates the Industry Standard Debug Framework

Design and Implementation of Source-Level Debugger Based on Emulator

General Flash Online Programming System Based on Debugger

Design of An Extended On-chip Real Time Debug System

Bringing Source-Level Debugging Frameworks to Hardware Generators

Design for Debug System in Embedded System

A Low-cost Zero-overhead In-circuit Debug System Design for SoC

Emulation and verification framework for MPSoC based on NoC and RISC-V

RV-CURE: A RISC-V Capability Architecture for Full Memory Safety

HyperDbg: Reinventing Hardware-Assisted Debugging (Extended Version)

FPGA based hardware-software co-designed dynamic binary translation system

Real-Time RISC-V-Based CAN-FD Bus Diagnosis Tool

InsectACIDE: Debugger-Based Holistic Asynchronous CFI for Embedded System

An SW-HW Co-Design Debug Interface for SOCs Based on JTAG

An Agile Instruction Set Extension Method Based on the RISC-V Processor

Partial Reconfiguration for Run-time Memory Faults and Hardware Trojan Attacks Detection

DEBUGGER DESIGN FOR MICROPROCESSOR WITH HYBRID ARCHITECTURE OF SUPERSCALAR-VLIW

Endebug: A Hardware–software Framework for Automated Energy Debugging

A Debug Sub-System for Embedded-System Co-Verification

RDAMS: an Efficient Run-Time Approach for Memory Fault and Hardware Trojans Detection

Extending programs with debug-related features, with application to hardware development