Abstract:Nowadays, code reuse attacks impose a substantial threat to the security of operating system kernels. Control-flow graph-based CFI techniques, while effective, bring considerable performance overhead, thus limiting their practical adoption in real-world products. As an alternative approach, recent research suggests safeguarding the integrity of sensitive pointers as a countermeasure against manipulation attempts. Unfortunately, existing pointer integrity protection schemes only protect sensitive pointers partially and ignore assembly code, leaving protection gaps. To fill up these protection gaps, we propose a novel security concept named full life-cycle integrity , which enforces the integrity of a sensitive pointer at every step on its value flow chain. To realize full life-cycle integrity, we propose three novel techniques, including assembly-aware sensitivity for analyzing assembly code, Merkle PAC tree for protecting interrupt context securely and efficiently, and pointer-grained authentication for defeating spatial substitution attacks. We have developed a practical implementation of comprehensive life-cycle integrity for the Linux kernel, called ”kernel Code Pointer Authentication” (kCPA), which leverages the ARM Pointer Authentication (PAuth) mechanism. This implementation has been extended to the Apple M1 architecture for real-world evaluation on PAuth hardware. Our assessment demonstrates that kCPA effectively mitigates a range of real-world attacks while incurring a minimal 2.5% performance overhead for the Phoronix Test Suite and nearly negligible performance impact for SPEC2017 benchmarks.

A Dynamically Modified Privilege Control Policy

A Framework for Implementing Dynamically Modified Least Privilege Security Policy

A Task-Role Based Access Control Model with Multi-Constraints

Enforcing the principle of least privilege with a state-based privilege control model

Handling Dynamic Information Release

Kcpa: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels

Secure Information Exchange Model Between PDM Systems

Policy-adaptive Capability Inheritance Algorithm Consistent with POSIX Standard

Permission-Based Separation of Duty in Dynamic Role-Based Access Control Model.

Dynamic Protection Technology for Privilege Escalation Attack on Android

An Authorization Mechanism Based on Privilege Negotiation Policy in Grid

Separation of Duty Constraint for Permission Based Delegation Model

A Policy Flexible Architecture for Secure Operating System.

Implementing the principle of least administrative privilege on operating systems: challenges and perspectives

A Coordinated Negotiation Policy for Privileges in Grid Authorization Mechanism

Towards a Dynamic Multi-Policy Dissemination Control Model: (DMDCON).

Dynamic Multi-level Privilege Control in Behavior-based Implicit Authentication Systems Leveraging Mobile Devices

Making Least Privilege The Low-Hanging Fruit In Clouds

Automated Enforcement of the Principle of Least Privilege over Data Source Access

Role-Based ABAC Model for Implementing Least Privileges

Toward security as a service: A trusted cloud service architecture with policy customization