Abstract:The growing prevalence of embedded systems in various applications has raised concerns about their vulnerability to malicious code reuse attacks. Current software-based and hardware-assisted security techniques struggle to detect or block these attacks with minor performance and implementation overhead. To address this issue, this paper presents a lightweight hardware-assisted scheme to enhance the security of embedded systems against code reuse attacks. We develop an on-chip lightweight hardware shadow stack to validate target addresses at runtime for backward-edge control flow integrity, which backs up valid return addresses during function calls and automatically verifies actual return addresses during the return phase. Additionally, we propose a lightweight stream cipher circuit that encrypts and decrypts critical stack data related to control flow manipulation, preventing attackers from analyzing or tampering with them. When designing and implementing the security mechanism for embedded systems, we fully consider the constraints of limited system resources and performance, optimizing both the architecture design and implementation of the proposed hardware. Finally, we integrate both the proposed lightweight hardware shadow stack and the runtime data encryption hardware into the OR1200 processor. We have verified the system security function on the Terasic DE1-SoC FPGA platform and evaluated the system performance as well as implementation overhead. The results show that the proposed lightweight hardware-assisted scheme can provide a dedicated defense capability against code reuse attacks for embedded systems, with an average system performance overhead of 0.39% and an area footprint of 0.316 mm2.

A Memory and Disk Integrity Protection Scheme

Security Memory System for Mobile Device or Computer Against Memory Attacks

Kcpa: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels

MIPE: a Practical Memory Integrity Protection Method in a Trusted Execution Environment.

Protecting In-memory Data Cache with Secure Enclaves in Untrusted Cloud.

Physical Memory Attacks and a Memory Safe Management System for Memory Defense

Architecting Non-Volatile Main Memory to Guard Against Persistence-based Attacks

Partial Reconfiguration for Run-time Memory Faults and Hardware Trojan Attacks Detection

A novel delay-resilient remote memory attestation for smart grid

Encryption scheme design and implementation of embedded processor off-chip memory access

Based On Wdm Of Disk Immunity Systems

Securing Embedded System from Code Reuse Attacks: A Lightweight Scheme with Hardware Assistance

Memory Integrity Techniques for Memory-Unsafe Languages: A Survey

ShieldNVM

EqualVisor: Providing Memory Protection in an Untrusted Commodity Hypervisor

SecDDR: Enabling Low-Cost Secure Memories by Protecting the DDR Interface

Hardware-Assisted Monitoring For Instruction Security In Embedded System

MProtect: Operating System Memory Management without Access

FEDTIC: A Security Design for Embedded Systems with Insecure External Memory

An attack-immune trusted architecture for supervisory aircraft hardware

HyperCheck: A Hardware-AssistedIntegrity Monitor