M-MAP: Multi-factor memory authentication for secure embedded processors

S.K. Haider; M. Ahmad; F. Hijaz; A. Patni; E. Johnson; M. Seita; O. Khan; M. Van Dijk

doi:10.1109/ICCD.2015.7357151

M-MAP: Multi-factor memory authentication for secure embedded processors

S.K. Haider, M. Ahmad, F. Hijaz, A. Patni, E. Johnson, M. Seita, O. Khan, M. Van Dijk

Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

Abstract

© 2015 IEEE.The challenges faced in securing embedded computing systems against multifaceted memory safety vulnerabilities have prompted great interest in the development of memory safety countermeasures. These countermeasures either provide protection only against their corresponding type of vulnerabilities, or incur substantial architectural modifications and overheads in order to provide complete safety, which makes them infeasible for embedded systems. In this paper, we propose M-MAP: A comprehensive system based on multi-factor memory authentication for complete memory safety. We examine certain crucial implications of composing memory integrity verification and bounds checking schemes in a comprehensive system. Based on these implications, we implement M-MAP with hardware based memory integrity verification and software based bounds checking to achieve a balance between hardware modifications and performance. We demonstrate that M-MAP implemented on top of a lightweight out-of-order processor delivers complete memory safety with only 32% performance overhead on average, while incurring minimal hardware modifications, and area overhead.

Original language	English
Title of host publication	Proceedings of the 33rd IEEE International Conference on Computer Design, ICCD 2015
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	471-474
ISBN (Electronic)	9781467371650
DOIs	https://doi.org/10.1109/ICCD.2015.7357151
Publication status	Published - 14 Dec 2015
Externally published	Yes
Event	33rd IEEE International Conference on Computer Design, ICCD 2015 - New York City, United States Duration: 18 Oct 2015 → 21 Oct 2015

Conference

Conference	33rd IEEE International Conference on Computer Design, ICCD 2015
Country/Territory	United States
City	New York City
Period	18/10/15 → 21/10/15

Access to Document

10.1109/ICCD.2015.7357151

Persistent URL (handle)

Copy link address

Cite this

Haider, S. K., Ahmad, M., Hijaz, F., Patni, A., Johnson, E., Seita, M., Khan, O., & Van Dijk, M. (2015). M-MAP: Multi-factor memory authentication for secure embedded processors. In Proceedings of the 33rd IEEE International Conference on Computer Design, ICCD 2015 (pp. 471-474). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICCD.2015.7357151

@inproceedings{5ab192facc82490ba2a22fd4721c220a,

title = "M-MAP: Multi-factor memory authentication for secure embedded processors",

abstract = "{\textcopyright} 2015 IEEE.The challenges faced in securing embedded computing systems against multifaceted memory safety vulnerabilities have prompted great interest in the development of memory safety countermeasures. These countermeasures either provide protection only against their corresponding type of vulnerabilities, or incur substantial architectural modifications and overheads in order to provide complete safety, which makes them infeasible for embedded systems. In this paper, we propose M-MAP: A comprehensive system based on multi-factor memory authentication for complete memory safety. We examine certain crucial implications of composing memory integrity verification and bounds checking schemes in a comprehensive system. Based on these implications, we implement M-MAP with hardware based memory integrity verification and software based bounds checking to achieve a balance between hardware modifications and performance. We demonstrate that M-MAP implemented on top of a lightweight out-of-order processor delivers complete memory safety with only 32% performance overhead on average, while incurring minimal hardware modifications, and area overhead.",

author = "S.K. Haider and M. Ahmad and F. Hijaz and A. Patni and E. Johnson and M. Seita and O. Khan and {Van Dijk}, M.",

year = "2015",

month = dec,

day = "14",

doi = "10.1109/ICCD.2015.7357151",

language = "English",

pages = "471--474",

booktitle = "Proceedings of the 33rd IEEE International Conference on Computer Design, ICCD 2015",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

address = "United States",

note = "33rd IEEE International Conference on Computer Design, ICCD 2015 ; Conference date: 18-10-2015 Through 21-10-2015",

}

Haider, SK, Ahmad, M, Hijaz, F, Patni, A, Johnson, E, Seita, M, Khan, O & Van Dijk, M 2015, M-MAP: Multi-factor memory authentication for secure embedded processors. in Proceedings of the 33rd IEEE International Conference on Computer Design, ICCD 2015. Institute of Electrical and Electronics Engineers Inc., pp. 471-474, 33rd IEEE International Conference on Computer Design, ICCD 2015, New York City, United States, 18/10/15. https://doi.org/10.1109/ICCD.2015.7357151

M-MAP: Multi-factor memory authentication for secure embedded processors. / Haider, S.K.; Ahmad, M.; Hijaz, F. et al.
Proceedings of the 33rd IEEE International Conference on Computer Design, ICCD 2015. Institute of Electrical and Electronics Engineers Inc., 2015. p. 471-474.

Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - M-MAP

T2 - 33rd IEEE International Conference on Computer Design, ICCD 2015

AU - Haider, S.K.

AU - Ahmad, M.

AU - Hijaz, F.

AU - Patni, A.

AU - Johnson, E.

AU - Seita, M.

AU - Khan, O.

AU - Van Dijk, M.

PY - 2015/12/14

Y1 - 2015/12/14

N2 - © 2015 IEEE.The challenges faced in securing embedded computing systems against multifaceted memory safety vulnerabilities have prompted great interest in the development of memory safety countermeasures. These countermeasures either provide protection only against their corresponding type of vulnerabilities, or incur substantial architectural modifications and overheads in order to provide complete safety, which makes them infeasible for embedded systems. In this paper, we propose M-MAP: A comprehensive system based on multi-factor memory authentication for complete memory safety. We examine certain crucial implications of composing memory integrity verification and bounds checking schemes in a comprehensive system. Based on these implications, we implement M-MAP with hardware based memory integrity verification and software based bounds checking to achieve a balance between hardware modifications and performance. We demonstrate that M-MAP implemented on top of a lightweight out-of-order processor delivers complete memory safety with only 32% performance overhead on average, while incurring minimal hardware modifications, and area overhead.

AB - © 2015 IEEE.The challenges faced in securing embedded computing systems against multifaceted memory safety vulnerabilities have prompted great interest in the development of memory safety countermeasures. These countermeasures either provide protection only against their corresponding type of vulnerabilities, or incur substantial architectural modifications and overheads in order to provide complete safety, which makes them infeasible for embedded systems. In this paper, we propose M-MAP: A comprehensive system based on multi-factor memory authentication for complete memory safety. We examine certain crucial implications of composing memory integrity verification and bounds checking schemes in a comprehensive system. Based on these implications, we implement M-MAP with hardware based memory integrity verification and software based bounds checking to achieve a balance between hardware modifications and performance. We demonstrate that M-MAP implemented on top of a lightweight out-of-order processor delivers complete memory safety with only 32% performance overhead on average, while incurring minimal hardware modifications, and area overhead.

UR - http://www.scopus.com/inward/record.url?scp=84962345987&partnerID=8YFLogxK

U2 - 10.1109/ICCD.2015.7357151

DO - 10.1109/ICCD.2015.7357151

M3 - Conference contribution

SP - 471

EP - 474

BT - Proceedings of the 33rd IEEE International Conference on Computer Design, ICCD 2015

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 18 October 2015 through 21 October 2015

ER -

M-MAP: Multi-factor memory authentication for secure embedded processors

Abstract

Conference

Access to Document

Persistent URL (handle)

Other files and links

Fingerprint

Cite this