A hardware coprocessor for Zynq-based Dynamic Information Flow Tracking - CentraleSupélec
Communication Dans Un Congrès Année : 2016

A hardware coprocessor for Zynq-based Dynamic Information Flow Tracking

Résumé

This talk introduces an efficient and portable approach for DIFT (Dynamic Information Flow Tracking) implementations on recon gurable chips. DIFT aims to track the application control flow by adding metadata (also known as tags) to information containers (e.g. registers, memory addresses, ...), propagating and checking it at runtime. These approaches have been successfully used against a wide range of attacks including bu er over ow, SQL injections and so on. Existing DIFT solutions are either hardly portable or bring unsatisfactory time overheads. For example, DIFT in software brings an overhead of at least 300% and can rise up to 3700%. Our chosen approach conists of using a dedicated coprocessor to decouple main computation (application) from tags computation. To efficiently retrieve information on executed instructions by the main CPU, ARM Coresight components are used to export CPU trace towards FPGA part of Zynq SoC. In addition to trace, static analysis needs to be done to get dependencies between information containers. This talk will present our chosen approach, ongoing work on first prototype and rst results. Existing DIFT approaches and ARM Coresight components will also be discussed.
09-Wahab.pdf (1.41 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01341830 , version 1 (11-07-2016)

Identifiants

  • HAL Id : hal-01341830 , version 1

Citer

Muhammad Abdul Wahab, Christophe Moy, Pascal Cotret. A hardware coprocessor for Zynq-based Dynamic Information Flow Tracking. 14th International Workshop on Cryptographic architectures embedded in logic devices (CryptArchi), Jun 2016, La Grande Motte, France. ⟨hal-01341830⟩
298 Consultations
120 Téléchargements

Partager

More