The Experts below are selected from a list of 231 Experts worldwide ranked by ideXlab platform
Vincent J Mooney - One of the best experts on this subject based on the ideXlab platform.
-
Hardware Root-of-Trust-based Integrity for Shared Library Function Pointers in Embedded Systems
Microprocessors and Microsystems, 2020Co-Authors: Patrick H Coppock, Alhad J Daftardar, Zayd Tolaymat, Momen K. Yacoub, Bruce L. Qin, Vincent J MooneyAbstract:Many security measures designed for large-scale compute hardware (e.g., workstations and servers) are not optimized for embedded systems. One such measure, Relocation Read-Only (RelRO), protects binary relocation sections from tampering after dynamic linking; however, RelRO depends on the presence of memory management hardware that not all embedded systems include. More generally, the latest hardware modifications to processor architectures may not always be available to provide security in small-scale embedded systems. In this paper, we propose another solution for relocation protection for use in embedded systems that have a field-programmable gate array (FPGA) on chip. Our solution prevents relocation section overwrites from diverting control flow as they would in an unprotected binary by implementing a hardware Root of Trust into which to store and out of which to retrieve shared Library Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust protection. We also demonstrate a proof of concept implemented on a popular FPGA development board and provide comparison with RelRO. Our work provides embedded system developers with a security measure like RelRO but without requiring a customized memory management unit and is useful on computer systems that include embedded reconfigurable logic on chip. The authors believe this is the first paper in which reconfigurable logic is used to provide security Functionality previously implemented in a custom instruction set or other computer architecture modifications. Our work points toward a future where FPGA logic embedded on chip can be adapted to improve the security of software.
-
hardware root of trust based integrity for shared Library Function pointers in embedded systems
Mediterranean Conference on Embedded Computing, 2019Co-Authors: Gabriela Lopez, Michael Foreman, Alhad J Daftardar, Patrick H Coppock, Zayd Tolaymat, Vincent J MooneyAbstract:For resource constrained embedded devices security is often an afterthought during design time. As new applications and devices are developed, they are handling more and more sensitive information. It is imperative to come up with effective solutions that can be supported by these constrained systems. In this work we propose a solution to mitigate shared Library Function attacks by implementing a hardware root of trust from which to store and retrieve Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust version. Our work renders GOT overwrite attacks ineffective since it isolates and protects shared Library Function pointers.
-
MECO - Hardware Root-of-Trust Based Integrity for Shared Library Function Pointers in Embedded Systems
2019 8th Mediterranean Conference on Embedded Computing (MECO), 2019Co-Authors: Gabriela Lopez, Michael Foreman, Alhad J Daftardar, Patrick H Coppock, Zayd Tolaymat, Vincent J MooneyAbstract:For resource constrained embedded devices security is often an afterthought during design time. As new applications and devices are developed, they are handling more and more sensitive information. It is imperative to come up with effective solutions that can be supported by these constrained systems. In this work we propose a solution to mitigate shared Library Function attacks by implementing a hardware root of trust from which to store and retrieve Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust version. Our work renders GOT overwrite attacks ineffective since it isolates and protects shared Library Function pointers.
Patrick H Coppock - One of the best experts on this subject based on the ideXlab platform.
-
Hardware Root-of-Trust-based Integrity for Shared Library Function Pointers in Embedded Systems
Microprocessors and Microsystems, 2020Co-Authors: Patrick H Coppock, Alhad J Daftardar, Zayd Tolaymat, Momen K. Yacoub, Bruce L. Qin, Vincent J MooneyAbstract:Many security measures designed for large-scale compute hardware (e.g., workstations and servers) are not optimized for embedded systems. One such measure, Relocation Read-Only (RelRO), protects binary relocation sections from tampering after dynamic linking; however, RelRO depends on the presence of memory management hardware that not all embedded systems include. More generally, the latest hardware modifications to processor architectures may not always be available to provide security in small-scale embedded systems. In this paper, we propose another solution for relocation protection for use in embedded systems that have a field-programmable gate array (FPGA) on chip. Our solution prevents relocation section overwrites from diverting control flow as they would in an unprotected binary by implementing a hardware Root of Trust into which to store and out of which to retrieve shared Library Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust protection. We also demonstrate a proof of concept implemented on a popular FPGA development board and provide comparison with RelRO. Our work provides embedded system developers with a security measure like RelRO but without requiring a customized memory management unit and is useful on computer systems that include embedded reconfigurable logic on chip. The authors believe this is the first paper in which reconfigurable logic is used to provide security Functionality previously implemented in a custom instruction set or other computer architecture modifications. Our work points toward a future where FPGA logic embedded on chip can be adapted to improve the security of software.
-
hardware root of trust based integrity for shared Library Function pointers in embedded systems
Mediterranean Conference on Embedded Computing, 2019Co-Authors: Gabriela Lopez, Michael Foreman, Alhad J Daftardar, Patrick H Coppock, Zayd Tolaymat, Vincent J MooneyAbstract:For resource constrained embedded devices security is often an afterthought during design time. As new applications and devices are developed, they are handling more and more sensitive information. It is imperative to come up with effective solutions that can be supported by these constrained systems. In this work we propose a solution to mitigate shared Library Function attacks by implementing a hardware root of trust from which to store and retrieve Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust version. Our work renders GOT overwrite attacks ineffective since it isolates and protects shared Library Function pointers.
-
MECO - Hardware Root-of-Trust Based Integrity for Shared Library Function Pointers in Embedded Systems
2019 8th Mediterranean Conference on Embedded Computing (MECO), 2019Co-Authors: Gabriela Lopez, Michael Foreman, Alhad J Daftardar, Patrick H Coppock, Zayd Tolaymat, Vincent J MooneyAbstract:For resource constrained embedded devices security is often an afterthought during design time. As new applications and devices are developed, they are handling more and more sensitive information. It is imperative to come up with effective solutions that can be supported by these constrained systems. In this work we propose a solution to mitigate shared Library Function attacks by implementing a hardware root of trust from which to store and retrieve Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust version. Our work renders GOT overwrite attacks ineffective since it isolates and protects shared Library Function pointers.
Doug James - One of the best experts on this subject based on the ideXlab platform.
-
Library Function tracking with xalt
Proceedings of the XSEDE16 Conference on Diversity Big Data and Science at Scale, 2016Co-Authors: Reuben D Budiardja, Kapil Agrawal, Mark R Fahey, Robert Mclay, Doug JamesAbstract:XALT is a tracking tool that collects accurate, detailed, and continuous job-level and link-time data. XALT stores that data in a database and ensures that all the data collection is transparent to the users. XALT tracks libraries and object files linked by the application. A recent feature improvement in XALT enable it to also track external subroutines and Functions called by an application. This paper describes the Function-tracking implementation in XALT and showcases the kind of data and analysis that becomes available from this new feature. A recently developed web-based interface to XALT database is also described, allowing the staffs of a supercomputing center to more easily understand software usage on their compute resources.
-
XSEDE - Library Function Tracking with XALT
Proceedings of the XSEDE16 Conference on Diversity Big Data and Science at Scale, 2016Co-Authors: Reuben D Budiardja, Kapil Agrawal, Mark R Fahey, Robert Mclay, Doug JamesAbstract:XALT is a tracking tool that collects accurate, detailed, and continuous job-level and link-time data. XALT stores that data in a database and ensures that all the data collection is transparent to the users. XALT tracks libraries and object files linked by the application. A recent feature improvement in XALT enable it to also track external subroutines and Functions called by an application. This paper describes the Function-tracking implementation in XALT and showcases the kind of data and analysis that becomes available from this new feature. A recently developed web-based interface to XALT database is also described, allowing the staffs of a supercomputing center to more easily understand software usage on their compute resources.
Fang Xia - One of the best experts on this subject based on the ideXlab platform.
-
Specific Library Function Identification Technology Based on Vague Matching
Computer Engineering, 2011Co-Authors: Fang XiaAbstract:Aiming at the problem that traditional Library Function identification technology can not recognize specific Library Function effectively,this paper proposes a specific Library Function identification technology based on vague matching.The technique improves the Function signature mechanism produced by Fast Library Identification and Recognition Technology(FLIRT),extracts a valid Function congregation from the target file and does vague matching using professional Library Function feature database.Vague matching determines the signature to be loaded,loads the signature and fulfils the accurate matching.Experimental results show that the method does well at specific Library Function identification.
Alhad J Daftardar - One of the best experts on this subject based on the ideXlab platform.
-
Hardware Root-of-Trust-based Integrity for Shared Library Function Pointers in Embedded Systems
Microprocessors and Microsystems, 2020Co-Authors: Patrick H Coppock, Alhad J Daftardar, Zayd Tolaymat, Momen K. Yacoub, Bruce L. Qin, Vincent J MooneyAbstract:Many security measures designed for large-scale compute hardware (e.g., workstations and servers) are not optimized for embedded systems. One such measure, Relocation Read-Only (RelRO), protects binary relocation sections from tampering after dynamic linking; however, RelRO depends on the presence of memory management hardware that not all embedded systems include. More generally, the latest hardware modifications to processor architectures may not always be available to provide security in small-scale embedded systems. In this paper, we propose another solution for relocation protection for use in embedded systems that have a field-programmable gate array (FPGA) on chip. Our solution prevents relocation section overwrites from diverting control flow as they would in an unprotected binary by implementing a hardware Root of Trust into which to store and out of which to retrieve shared Library Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust protection. We also demonstrate a proof of concept implemented on a popular FPGA development board and provide comparison with RelRO. Our work provides embedded system developers with a security measure like RelRO but without requiring a customized memory management unit and is useful on computer systems that include embedded reconfigurable logic on chip. The authors believe this is the first paper in which reconfigurable logic is used to provide security Functionality previously implemented in a custom instruction set or other computer architecture modifications. Our work points toward a future where FPGA logic embedded on chip can be adapted to improve the security of software.
-
hardware root of trust based integrity for shared Library Function pointers in embedded systems
Mediterranean Conference on Embedded Computing, 2019Co-Authors: Gabriela Lopez, Michael Foreman, Alhad J Daftardar, Patrick H Coppock, Zayd Tolaymat, Vincent J MooneyAbstract:For resource constrained embedded devices security is often an afterthought during design time. As new applications and devices are developed, they are handling more and more sensitive information. It is imperative to come up with effective solutions that can be supported by these constrained systems. In this work we propose a solution to mitigate shared Library Function attacks by implementing a hardware root of trust from which to store and retrieve Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust version. Our work renders GOT overwrite attacks ineffective since it isolates and protects shared Library Function pointers.
-
MECO - Hardware Root-of-Trust Based Integrity for Shared Library Function Pointers in Embedded Systems
2019 8th Mediterranean Conference on Embedded Computing (MECO), 2019Co-Authors: Gabriela Lopez, Michael Foreman, Alhad J Daftardar, Patrick H Coppock, Zayd Tolaymat, Vincent J MooneyAbstract:For resource constrained embedded devices security is often an afterthought during design time. As new applications and devices are developed, they are handling more and more sensitive information. It is imperative to come up with effective solutions that can be supported by these constrained systems. In this work we propose a solution to mitigate shared Library Function attacks by implementing a hardware root of trust from which to store and retrieve Function pointers. We offer two system variations which provide designers with flexibility to choose a lighter or a more robust version. Our work renders GOT overwrite attacks ineffective since it isolates and protects shared Library Function pointers.