Decoupling dynamic information flow tracking with a dedicated coprocessor

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2009, Pages 105-114

  Kannan, Hari ^a   Dalton, Michael ^a   Kozyrakis, Christos ^a  

^a Stanford University   (United States)

Author keywords

Coprocessors; Dynamic information flow tracking; Processor architecture; Semantic vulnerabilities; Software security

Indexed keywords

CO-PROCESSORS; DYNAMIC INFORMATION FLOW TRACKING; PROCESSOR ARCHITECTURE; PROCESSOR ARCHITECTURES; SOFTWARE SECURITY;

COMPUTER ARCHITECTURE; COMPUTER OPERATING SYSTEMS; DYNAMIC PROGRAMMING; HARDWARE; NETWORK SECURITY; PIPELINES; SEMANTICS; SOFTWARE ARCHITECTURE;

PIPELINE PROCESSING SYSTEMS;

EID: 70449976325     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2009.5270347     Document Type: Conference Paper

References (27)

1. AMD. AMD Lightweight Profiling Proposal, 2007.
2. T. Austin. DIVA: A Reliable Substrate for Deep Submicron Microarchitecture Design. In the Proc. of the 32nd MICRO, Haifa, Israel, Nov. 1999.
3. S. Chen, B. Falsafi, et al. Logs and Lifeguards: Accelerating Dynamic Program Monitoring. Technical Report IRP-TR-06-05, Intel Research, Pittsburgh, PA, 2006.
4. S. Chen, M. Kozuch, et al. Flexible Hardware Acceleration for Instruction-Grain Program Monitoring. In the Proc. of the 35th ISCA, Beijing, China, June 2008.
5. S. Chen, J. Xu, et al. Defeating Memory Corruption Attacks via Pointer Taintedness Detection. In the Proc. of the 35th DSN, Yokohama, Japan, June 2005.
6. J. Chung, M. Dalton, et al. Thread-Safe Dynamic Binary Translation using Transactional Memory. In the Proc. of the 14th HPCA, Salt Lake City, UT, Feb. 2008.
7. J. R. Crandall and F. T. Chong. MINOS: Control Data Attack Prevention Orthogonal to Memory Model. In the Proc. of the 37th MICRO, Portland, OR, Dec. 2004.
8. M. Dalton, H. Kannan, and C. Kozyrakis. Raksha: A Flexible Information Flow Architecture for Software Security. In the Proc. of the 34th ISCA, San Diego, CA, June 2007.
9. M. Dalton, H. Kannan, and C. Kozyrakis. Real-World Buffer Overflow Protection for Userspace and Kernelspace. In the Proc. of the 17th Usenix Security Symposium, San Jose, CA, July 2008.
10. D. E. Denning and P. J. Denning. Certification of programs for secure information flow. ACM Communications, 20(7), 1977.
11. T. Garfinkel, B. Pfaff, and M. Rosenblum. Ostia: A Delegating Architecture for Secure System Call Interposition. In the Proc. of the 11th NDSS, San Diego, CA, Feb. 2004.
12. Intel Virtualization Technology (Intel VTx). http://www.intel.com/ technology/virtualization.
13. T. Jim, M. Rajagopalan, et al. System call monitoring using authenticated system calls. IEEE Trans. on Dependable and Secure Computing, 3(3):216-229, 2006.
14. LEON3 SPARC Processor. http://www.gaisler.com.
15. A. Mahmood and E. J. McCluskey. Concurrent error detection using watchdog processors - a survey. IEEE Trans. on Computers, 37(2), 1988.
16. V. Nagarajan, H.Kim, et al. Dynamic Information Tracking on Multcores. In the Proc. of the 12th INTERACT, Salt Lake City, UT, Feb. 2008.
17. N. Nakka, Z. Kalbarczyk, et al. An Architectural Framework for Providing Reliability and Security Support. In the Proc. of the 34th DSN, Florence, Italy, 2004.
18. J. Newsome and D. X. Song. Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software. In the Proc. of the 12th NDSS, San Diego, CA, Feb. 2005.
19. Perl taint mode. http://www.perl.com.
20. F. Qin, C. Wang, et al. LIFT: A Low-Overhead Practical Information Flow Tracking System for Detecting Security Attacks. In the Proc. of the 39th MICRO, Orlando, FL, Dec. 2006.
21. M. Rajagopalan, M. Hiltunen, et al. Authenticated System Calls. In the Proc. of the 35th DSN, Yokohama, Japan, June 2005.
22. W. Shi, J. Fryman, et al. InfoShield: A Security Architecture for Protecting Information Usage in Memory. In the Proc. of the 12th HPCA, Austin, TX, 2006.
23. Personal communication with Shih-Lien Lu, Senior Prinicipal Researcher, Intel Microprocessor Technology Labs, Hillsboro, OR.
24. G. E. Suh, J. W. Lee, et al. Secure Program Execution via Dynamic Information Flow Tracking. In the Proc. of the 11th ASPLOS, Boston, MA, Oct. 2004.
25. N. Vachharajani, M. J. Bridges, et al. RIFLE: An Architectural Framework for User-Centric Information-Flow Security. In the Proc. of the 37th MICRO, Portland, OR, Dec. 2004.
26. G. Venkataramani, I. Doudalis, et al. FlexiTaint: A Programmable Accelerator for Dynamic Taint Propagation. In the Proc. of the 14th HPCA, Salt Lake City, UT, Feb. 2008.
27. W. Xu, S. Bhatkar, and R. Sekar. Taint-enhanced policy enforcement: A practical approach to defeat a wide range of attacks. In the Proc. of the 15th USENIX Security Symp., Vancouver, Canada, Aug. 2006.