Abstract:With the improvements of computing technology, more and more applications embed powerful ARM processors into their devices. These systems can be attacked by redirecting the control-flow of a program to bypass critical pieces of code such as privilege checks or signature verifications. Control-flow hijacks can be performed using classical software vulnerabilities, physical fault attacks, or software-induced fault attacks. To cope with this threat and to protect the control-flow, dedicated countermeasures are needed. To counteract control-flow hijacks, control-flow integrity~(CFI) aims to be a generic solution. However, software-based CFI typically either protects against software or fault attacks, but not against both. While hardware-assisted CFI can mitigate both types of attacks, they require extensive hardware modifications. As hardware changes are unrealistic for existing ARM architectures, a wide range of systems remains unprotected and vulnerable to control-flow attacks. In this work, we present FIPAC, an efficient software-based CFI scheme protecting the execution at basic block granularity of ARM-based devices against software and fault attacks. FIPAC exploits ARM pointer authentication of ARMv8.6-A to implement a cryptographically signed control-flow graph. We cryptographically link the correct sequence of executed basic blocks to enforce CFI at this granularity. We use an LLVM-based toolchain to automatically instrument programs. The evaluation on SPEC2017 with different security policies shows a code overhead between 54-97\% and a runtime overhead between 35-105%. While these overheads are higher than for countermeasures against software attacks, FIPAC outperforms related work protecting the control-flow against fault attacks. FIPAC is an efficient solution to provide protection against software- and fault-based CFI attacks on basic block level on modern ARM devices.

Hardware-Assisted Fault Isolation: Going Beyond the Limits of Software-Based Sandboxing

Armlock: Hardware-Based Fault Isolation For Arm

Hardware-Assisted Control-Flow Integrity Enhancement for IoT Devices

Enhanced Compiler Technology for Software-based Hardware Fault Detection

DriverJar: Lightweight Device Driver Isolation for ARM

Undertow: an Intra-Kernel Isolation Mechanism for Hardware-Assisted Virtual Machines.

Envisioning a Safety Island to Enable HPC Devices in Safety-Critical Domains

PULP: Inner-process Isolation based on the Program Counter and Data Memory Address

A Hardware-Software Co-design for Efficient Intra-Enclave Isolation

FIPAC: Thwarting Fault- and Software-Induced Control-Flow Attacks with ARM Pointer Authentication

Citadel: Real-World Hardware-Software Contracts for Secure Enclaves Through Microarchitectural Isolation and Controlled Speculation

Advancing Trustworthiness in System-in-Package: A Novel Root-of-Trust Hardware Security Module for Heterogeneous Integration

EC-CFI: Control-Flow Integrity via Code Encryption Counteracting Fault Attacks

When a Patch is Not Enough - HardFails: Software-Exploitable Hardware Bugs

Resilient and Secure Programmable System-on-Chip Accelerator Offload

Camouflage: Hardware-assisted CFI for the ARM Linux kernel

SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions

Libra: Architectural Support For Principled, Secure And Efficient Balanced Execution On High-End Processors (Extended Version)

Control-Flow Integrity for Real-Time Embedded Systems

Abusing Processor Exception for General Binary Instrumentation on Bare-metal Embedded Devices

Era of Sentinel Tech: Charting Hardware Security Landscapes Through Post-Silicon Innovation, Threat Mitigation and Future Trajectories