论文标题
内存标签:内存有效设计
Memory Tagging: A Memory Efficient Design
论文作者
论文摘要
ARM最近引入了一个称为内存标记扩展名或MTE的安全功能,该功能旨在防御常见的内存安全漏洞,例如免费后的缓冲区溢出和使用。在本文中,我们研究了MTE的三个方面。首先,我们调查现代软件系统(例如GLIBC,Android,Chrome,Linux和LLVM)如何使用MTE。我们确定一些常见的弱点并提出改进。其次,我们开发和实验MTE的建筑改进,以提高其记忆效率。我们的设计实现了更长的内存标签,从而提高了MTE的准确性。最后,我们讨论了MTE的许多增强功能,以提高其针对某些记忆安全攻击的安全性。
ARM recently introduced a security feature called Memory Tagging Extension or MTE, which is designed to defend against common memory safety vulnerabilities, such as buffer overflow and use after free. In this paper, we examine three aspects of MTE. First, we survey how modern software systems, such as Glibc, Android, Chrome, Linux, and LLVM, use MTE. We identify some common weaknesses and propose improvements. Second, we develop and experiment with an architectural improvement to MTE that improves its memory efficiency. Our design enables longer memory tags, which improves the accuracy of MTE. Finally, we discuss a number of enhancements to MTE to improve its security against certain memory safety attacks.