NDLI: Locking down insecure indirection with hardware-based control-data isolation

Please wait, while we are loading the content...

Large pages and lightweight memory management in virtualized environments: can you have it both ways?

HyComp: a hybrid cache compression method for selection of data-type-specific compression methods

Avoiding information leakage in the memory controller with fixed service policies

Efficiently prefetching complex address patterns

DeSC: decoupled supply-compute communication management for heterogeneous architectures

More is less: improving the energy efficiency of data movement via opportunistic use of sparse codes

The CRISP performance model for dynamic voltage and frequency scaling in a GPGPU

DynaMOS: dynamic schedule migration for heterogeneous cores

SAWS: synchronization aware GPGPU warp scheduling for multiple independent warp schedulers

Ultra-low power render-based collision detection for CPU/GPU systems

Prediction-guided performance-energy trade-off for interactive applications

Modeling the implications of DRAM failures and protection techniques on datacenter TCO

CLEAN-ECC: high reliability ECC for adaptive granularity memory system

Efficient GPU synchronization without scopes: saying no to complex consistency models

Characterizing, modeling, and improving the QoE of mobile devices with low battery level

Exploiting commutativity to reduce the cost of updates to shared data in cache-coherent systems

Doppelgänger: a cache for approximate computing

Fork path: improving efficiency of ORAM by removing redundant memory accesses

Self-contained, accurate precomputation prefetching

Efficient warp execution in presence of divergence with collaborative context collection

Improving DRAM latency with dynamic asymmetric subarray

Safe limits on voltage reduction efficiency in GPUs: a direct measurement approach

Long term parking (LTP): criticality-aware resource allocation in OOO processors

Enabling coordinated register allocation and thread-level parallelism optimization for GPUs

Execution time prediction for energy-efficient hardware accelerators

Architecture-aware automatic computation offload for native applications

TimeTrader: exploiting latency tail to save datacenter energy for online search

vCache: architectural support for transparent and isolated virtual LLCs in virtualized environments

Efficient persist barriers for multicores

Cross-architecture performance prediction (XAPP) using CPU code to predict GPU performance

CCICheck: using µhb graphs to verify the coherence-consistency interface

The application slowdown model: quantifying and controlling the impact of inter-application interference at shared caches and main memory

Locking down insecure indirection with hardware-based control-data isolation

Confluence: unified instruction supply for scale-out servers

Control flow coalescing on a hybrid dataflow/von Neumann GPGPU

Gather-scatter DRAM: in-DRAM address translation to improve the spatial locality of non-unit strided accesses

Adaptive guardband scheduling to improve system-level efficiency of the POWER7+

The inner most loop iteration counter: a new dimension in branch history

Free launch: optimizing GPU dynamic kernel launches through thread reuse

Border control: sandboxing accelerators

Fast support for unstructured data processing: the unified automata processor

Rubik: fast analytical power management for latency-critical systems

An integrated concurrency and core-ISA architectural envelope definition, and test oracle, for IBM POWER multiprocessors

ThyNVM: enabling software-transparent crash consistency in persistent memory systems

A fast and accurate analytical technique to compute the AVF of sequential bits in a processor

MORC: a manycore-oriented compressed cache

Authenticache: harnessing cache ECC for system authentication

IMP: indirect memory prefetcher

A scalable architecture for ordered parallelism

Filtered runahead execution with a runahead buffer

GPU register file virtualization

Neural acceleration for GPU throughput processors

Enabling interposer-based disintegration of multi-core processors

Coherence domain restriction on large scale systems

Enabling portable energy efficiency with memory accelerated library

Bungee jumps: accelerating indirect branches through HW/SW co-design

WarpPool: sharing requests with inter-warp coalescing for throughput processors

Neuromorphic accelerators: a comparison between neuroscience and machine-learning approaches

DCS: a fast and scalable device-centric server architecture

Efficiently enforcing strong memory ordering in GPUs

Microarchitectural implications of event-driven server-side web applications

Locking down insecure indirection with hardware-based control-data isolation

Content Provider	ACM Digital Library
Author	Das, Reetuparna Arthur, William Austin, Todd Madeka, Sahil
Abstract	Arbitrary code injection pervades as a central issue in computer security where attackers seek to exploit the software attack surface. A key component in many exploits today is the successful execution of a control-flow attack. Control-Data Isolation (CDI) has emerged as a work which eliminates the root cause of contemporary control-flow attacks: indirect control flow instructions. These instructions are replaced by direct control flow edges dictated by the programmer and encoded into the application by the compiler. By subtracting the root cause of control-flow attack, Control-Data Isolation sidesteps the vulnerabilities and restrictive threat models adopted by other solutions in this space (e.g., Control-Flow Integrity). The CDI approach, while eliminating contemporary control-flow attacks, introduces non-trivial overheads to validate indirect targets at runtime. In this work we introduce novel architectural support to accelerate the execution of CDI-compliant code. Through the addition of an edge cache, we are able to cache legal indirect target edges and eliminate nearly all execution overhead for indirection-free applications. We demonstrate that through memoization of compiler-confirmed control flow transitions, overheads are reduced from 19% to 0.5% on average for Control-Data Isolated applications. Additionally, we show that the edge cache can efficiently provide the double-duty of predicting multi-way branch targets, thus providing even speedups for some CDI-compliant executions, compared to an architecture with unsophisticated indirect control prediction (e.g., BTB).
Starting Page	115
Ending Page	127
Page Count	13
File Format	PDF
ISBN	9781450340342
DOI	10.1145/2830772.2830801
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2015-12-05
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Control-flow attack Control-data isolation Security architectures Cfg inegrity Program transformation Security policies Secure computation Indirect control flow Software vulnerabilities
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in