Sponge-Based Control-Flow Protection for IoT Devices
| Autor: | Thomas Unterluggauer, David Schaffenrath, Mario Werner, Stefan Mangard |
|---|---|
| Rok vydání: | 2018 |
| Předmět: |
Authenticated encryption
FOS: Computer and information sciences Computer Science - Cryptography and Security Computer science business.industry 02 engineering and technology Encryption 020202 computer hardware & architecture Control flow Stateful firewall Embedded system 0202 electrical engineering electronic engineering information engineering 020201 artificial intelligence & image processing System on a chip Code injection Central processing unit business Cryptography and Security (cs.CR) Compile time |
| Zdroj: | EuroS&P 2018 IEEE European Symposium on Security and Privacy (EuroS&P) |
| DOI: | 10.48550/arxiv.1802.06691 |
| Popis: | Embedded devices in the Internet of Things (IoT) face a wide variety of security challenges. For example, software attackers perform code injection and code-reuse attacks on their remote interfaces, and physical access to IoT devices allows to tamper with code in memory, steal confidential Intellectual Property (IP), or mount fault attacks to manipulate a CPU's control flow. In this work, we present Sponge-based Control Flow Protection (SCFP). SCFP is a stateful, sponge-based scheme to ensure the confidentiality of software IP and its authentic execution on IoT devices. At compile time, SCFP encrypts and authenticates software with instruction-level granularity. During execution, an SCFP hardware extension between the CPU's fetch and decode stage continuously decrypts and authenticates instructions. Sponge-based authenticated encryption in SCFP yields fine-grained control-flow integrity and thus prevents code-reuse, code-injection, and fault attacks on the code and the control flow. In addition, SCFP withstands any modification of software in memory. For evaluation, we extended a RISC-V core with SCFP and fabricated a real System on Chip (SoC). The average overhead in code size and execution time of SCFP on this design is 19.8% and 9.1%, respectively, and thus meets the requirements of embedded IoT devices. Comment: accepted at IEEE EuroS&P 2018 |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|