面向代码重用攻击检测的安全调试架构研究与设计

为了在不修改处理器结构的基础上检测代码重用攻击,提出面向代码重用攻击检测的安全调试架构。针对通用基础调试结构可利用的调试信号,设计总线跟踪模块,为执行内存访问控制提供接口。研究基于性能计数器的函数级代码重用攻击检测方法,增加跟踪检测微控制单元,使安全调试架构与性能计数器配合工作,在不插桩的前提下完成检测。实验结果表明,安全调试架构传输延时小,资源消耗少,能够有效检测代码重用攻击。

RESEARCH AND DESIGN OF SECURE DEBUG ARCHITECTURE FOR DETECTING CODE REUSE ATTACK

In order to detect code reuse attacks without modifying the structure of the processor,we proposed the secure debug architecture for detecting code reuse attacks. For the debugging signals available in the general basic debugging structure,a bus trace module was designed to provide an interface for executing memory access control. We studied the function-level code reuse attack detection method based on performance counter. We added a trace detecting micro controller unit to make the security debugging architecture work with performance counter and to complete the detection without source code instrumentation. The experimental results show that the security debugging architecture can detect code reuse attacks effectively with less transmission delay and less resource consumption.