CETIS
Mengyao Xie, Chenggang Wu, Yinqian Zhang, Jiali Xu, Y. F. Lai, Yan Kang, Wei Wang, Zhe Wang
2022Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security15 citationsDOIOpen Access PDF
Abstract
Intel control-flow enforcement technology (CET) is a new hardware feature available in recent Intel processors. It supports the coarse-grained control-flow integrity for software to defeat memory corruption attacks. In this paper, we retrofit CET, particularly the write-protected shadow pages of CET used for implementing shadow stacks, to develop a generic and efficient intra-process memory isolation mechanism, dubbed CETIS.
Topics & Concepts
Computer scienceControl flowMemory protectionShadow (psychology)Operating systemMemory managementProcess (computing)SoftwareEmbedded systemIsolation (microbiology)Feature (linguistics)EnforcementVirtual memoryProgramming languageBiologyMicrobiologyLinguisticsPsychotherapistOverlayPsychologyLawPhilosophyPolitical scienceSecurity and Verification in ComputingAdvanced Malware Detection TechniquesCloud Data Security Solutions