论文标题
为我的世界着色：确定性标记以确保记忆安全
Color My World: Deterministic Tagging for Memory Safety
论文作者
论文摘要
硬件辅助的内存保护功能越来越多地部署在COTS处理器中。 ARMV8.5内存标记扩展（MTE）是一个最近的示例，该示例已用于提供概率检查以确保记忆安全性。 MTE的这种用途并不是针对标准对手的安全性，并且对内存进行任意读/写入访问。因此，MTE用作软件开发工具。在本文中，我们介绍了使用可以抵抗标准对手的MTE进行确定性记忆保护的第一个设计，因此适合于部署后的记忆安全。我们描述了用于实施静态分析和随后的MTE仪器的LLVM Clang的编译器扩展。通过全面的评估，我们表明我们的计划有效。
Hardware-assisted memory protection features are increasingly being deployed in COTS processors. ARMv8.5 Memory Tagging Extensions (MTE) is a recent example, which has been used to provide probabilistic checks for memory safety. This use of MTE is not secure against the standard adversary with arbitrary read/write access to memory. Consequently MTE is used as a software development tool. In this paper we present the first design for deterministic memory protection using MTE that can resist the standard adversary, and hence is suitable for post-deployment memory safety. We describe our compiler extensions for LLVM Clang implementing static analysis and subsequent MTE instrumentation. Via a comprehensive evaluation we show that our scheme is effective.
