Protecting the stack with PACed canaries

Hans Liljestrand, Zaheer Gauhar, Thomas Nyman, Jan-Erik Ekberg, N. Asokan

Research output: Chapter in Book/Report/Conference proceedingConference contributionScientificpeer-review

181 Downloads (Pure)

Abstract

Stack canaries remain a widely deployed defense against memory corruption attacks. Despite their practical usefulness, canaries are vulnerable to memory disclosure and
brute-forcing attacks. We propose PCan, a new approach based on ARMv8.3-A pointer authentication (PA), that uses dynamically-generated canaries to mitigate these weaknesses and show that it provides more fine-grained protec-
tion with minimal performance overhead.
Original languageEnglish
Title of host publicationSysTEX ’19, October 27, 2019, Huntsville, ON, Canada
PublisherACM
ISBN (Electronic)978-1-4503-6888-9
DOIs
Publication statusPublished - 27 Oct 2019
MoE publication typeA4 Article in a conference publication
EventWorkshop on System Software for Trusted Execution - Colocated with SOSP'19 October 27-30 2019, Huntsville, Ontario, Canada, Huntsville, Canada
Duration: 27 Oct 201927 Oct 2019
https://systex.ibr.cs.tu-bs.de/systex19/

Workshop

WorkshopWorkshop on System Software for Trusted Execution
Abbreviated titleSysTEX 2019
Country/TerritoryCanada
CityHuntsville
Period27/10/201927/10/2019
Internet address

Fingerprint

Dive into the research topics of 'Protecting the stack with PACed canaries'. Together they form a unique fingerprint.

Cite this