Abstract:The growing prevalence of embedded systems in various applications has raised concerns about their vulnerability to malicious code reuse attacks. Current software-based and hardware-assisted security techniques struggle to detect or block these attacks with minor performance and implementation overhead. To address this issue, this paper presents a lightweight hardware-assisted scheme to enhance the security of embedded systems against code reuse attacks. We develop an on-chip lightweight hardware shadow stack to validate target addresses at runtime for backward-edge control flow integrity, which backs up valid return addresses during function calls and automatically verifies actual return addresses during the return phase. Additionally, we propose a lightweight stream cipher circuit that encrypts and decrypts critical stack data related to control flow manipulation, preventing attackers from analyzing or tampering with them. When designing and implementing the security mechanism for embedded systems, we fully consider the constraints of limited system resources and performance, optimizing both the architecture design and implementation of the proposed hardware. Finally, we integrate both the proposed lightweight hardware shadow stack and the runtime data encryption hardware into the OR1200 processor. We have verified the system security function on the Terasic DE1-SoC FPGA platform and evaluated the system performance as well as implementation overhead. The results show that the proposed lightweight hardware-assisted scheme can provide a dedicated defense capability against code reuse attacks for embedded systems, with an average system performance overhead of 0.39% and an area footprint of 0.316 mm2.

Architecture and design of a secure encrypted microprocessor

A Research on System-level Architecture of Single-chip Cryptographic Data Processor

Design and VLSI implementation of a security ASIP

Design and VLSI Implementation of an Application Specific Instruction Set Security Processor

The design and implement of a mobile security SoC

A security processor based on MIPS 4KE architecture

Encryption scheme design and implementation of embedded processor off-chip memory access

Design and Implementation of a Secure RISC-V Microprocessor

A Configurable SoC Design for Information Security.

Fine-grained Analysis and Design of ASIP Instruction Set for Application of Encryption

Programmable Security Processor for Cryptography Algorithms

An Embedded RSA Processor for Encryption and Decryption

Architectural Integration Of Rsa Accelerator Into Mips Processor

A Low-Cost Cryptographic Processor for Security Embedded System

Unified Crypto Architecture Accelerating RSA/SHA for Security Processor

Securing Embedded System from Code Reuse Attacks: A Lightweight Scheme with Hardware Assistance

SecureD: A Secure Dual Core Embedded Processor

The Design and Implementation of a Block Cipher ASIC

Efficient Hardware Design and Implementation of Encrypted MIPS Processor

VLSI Design of a High-Speed RAS Crypto-Processor with Reconfigurable Architecture

Architecture Support for Memory Confidentiality and Integrity in Embedded Systems