Abstract:Software fault isolation (SFI) is an effective mechanism to confine untrusted modules inside isolated domains to protect their host applications. Since its debut, researchers have proposed different SFI systems for many purposes such as safe execution of untrusted native browser plugins. However, most of these systems focus on the x86 architecture. In recent years, ARM has become the dominant architecture for mobile devices and gains in popularity in data centers. Hence there is a compelling need for an efficient SFI system for the ARM architecture. Unfortunately, existing systems either have prohibitively high performance overhead or place various limitations on the memory layout and instructions of untrusted modules.In this paper, we propose ARMlock, a hardware-based fault isolation for ARM. It uniquely leverages the memory domain support in ARM processors to create multiple sandboxes. Memory accesses by the untrusted module (including read, write, and execution) are strictly confined by the hardware, and instructions running inside the sandbox execute at the same speed as those outside it. ARMlock imposes virtually no structural constraints on untrusted modules. For example, they can use self-modifying code, receive exceptions, and make system calls. Moreover, system calls can be interposed by ARMlock to enforce the policies set by the host. We have implemented a prototype of ARMlock for Linux that supports the popular ARMv6 and ARMv7 sub-architecture. Our security assessment and performance measurement show that ARMlock is practical, effective, and efficient.

MagBox: Keep the risk functions running safely in a magic box

Ubox: A Lightweight and Hardware-assisted Sandbox for Multicore Embedded Systems

Different is Good

Armlock: Hardware-Based Fault Isolation For Arm

Practical Control Flow Integrity and Randomization for Binary Executables

Instantly Obsoleting the Address-code Associations: A New Principle for Defending Advanced Code Reuse Attack

Lightweight and Seamless Memory Randomization for Mission-Critical Services in a Cloud Platform

Runtime Code Reuse Attacks: A Dynamic Framework Bypassing Fine-Grained Address Space Layout Randomization.

CheckedCBox: Type Directed Program Partitioning with Checked C for Incremental Spatial Memory Safety

MemCloak

SpecBox: A Label-Based Transparent Speculation Scheme Against Transient Execution Attacks

Defending ROP Attacks Using Basic Block Level Randomization

A Static Recognition Mechanism For Indirect Call Based On Static Single Assignment

The Illusion of Randomness: An Empirical Analysis of Address Space Layout Randomization Implementations

What You See is Not What You Get! Thwarting Just-in-Time ROP with Chameleon

De-randomizing the Code Segment with Timing Function Attack

MProtect: Operating System Memory Management without Access

Mitigating Code-Reuse Attacks On Cisc Architectures In A Hardware Approach

Breaking and Fixing Destructive Code Read Defenses

Blender: Self-randomizing Address Space Layout for Android Apps

PhantomCache: Obfuscating Cache Conflicts with Localized Randomization