fASLR: Function-Based ASLR via TrustZone-M and MPU for Resource-Constrained IoT Systems

Luo, Lan; Shao, Xinhui; Ling, Zhen; Yan, Huaiyu; Wei, Yumeng; Fu, Xinwen

doi:10.1109/jiot.2022.3190374

fASLR: Function-Based ASLR via TrustZone-M and MPU for Resource-Constrained IoT Systems

Journal Article · 15 September 2022 · IEEE Internet of Things Journal

DOI:https://doi.org/10.1109/jiot.2022.3190374· OSTI ID:1980407

^[1]; Shao, Xinhui ^[2]; ^[3]; Yan, Huaiyu ^[3]; Wei, Yumeng ^[2]; Fu, Xinwen ^[4]

Department of Computer Science, University of Central Florida, Orlando, FL, USA
School of Cyber Science and Engineering, Southeast University, Nanjing, China
School of Computer Science and Engineering, Southeast University, Nanjing, China
Department of Computer Science, University of Massachusetts Lowell, Lowell, MA, USA

Not provided.

Research Organization:: Univ. of Central Florida, Orlando, FL (United States)

Sponsoring Organization:: USDOE Office of Energy Efficiency and Renewable Energy (EERE)

DOE Contract Number:: EE0009152

OSTI ID:: 1980407

Journal Information:: IEEE Internet of Things Journal, Vol. 9, Issue 18; ISSN 2372-2541

Publisher:: IEEE

Country of Publication:: United States

Language:: English

References (14)

Practical Fine-Grained Binary Code Randomization† Priyadarshan, Soumyakant; Nguyen, Huan; Sekar, R. Annual Computer Security Applications Conference https://doi.org/10.1145/3427228.3427292	conference	December 2020
Extraction of forensically sensitive information from windows physical memory Hejazi, S. M.; Talhi, C.; Debbabi, M. Digital Investigation, Vol. 6 https://doi.org/10.1016/j.diin.2009.06.003	journal	September 2009
Analyzing the Gadgets Follner, Andreas; Bartel, Alexandre; Bodden, Eric Lecture Notes in Computer Science https://doi.org/10.1007/978-3-319-30806-7_10	book	January 2016
Compiler-Assisted Code Randomization Koo, Hyungjoon; Chen, Yaohui; Lu, Long 2018 IEEE Symposium on Security and Privacy (SP) https://doi.org/10.1109/SP.2018.00029	conference	May 2018
Isomeron: Code Randomization Resilient to (Just-In-Time) Return-Oriented Programming Davi, Lucas; Liebchen, Christopher; Sadeghi, Ahmad-Reza Proceedings 2015 Network and Distributed System Security Symposium https://doi.org/10.14722/ndss.2015.23262	conference	January 2015
Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization Snow, K. Z.; Monrose, F.; Davi, L. 2013 IEEE Symposium on Security and Privacy https://doi.org/10.1109/SP.2013.45	conference	May 2013
HARM: Hardware-Assisted Continuous Re-randomization for Microcontrollers Shi, Jiameng; Guan, Le; Li, Wenqiang 2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P) https://doi.org/10.1109/EuroSP53844.2022.00039	conference	June 2022
Mitigating code-reuse attacks with control-flow locking Bletsch, Tyler; Jiang, Xuxian; Freeh, Vince Proceedings of the 27th Annual Computer Security Applications Conference https://doi.org/10.1145/2076732.2076783	conference	December 2011
SoK: Automated Software Diversity Larsen, Per; Homescu, Andrei; Brunthaler, Stefan 2014 IEEE Symposium on Security and Privacy https://doi.org/10.1109/SP.2014.25	conference	May 2014
CFI CaRE: Hardware-Supported Call and Return Enforcement for Commercial Microcontrollers Nyman, Thomas; Ekberg, Jan-Erik; Davi, Lucas Research in Attacks, Intrusions, and Defenses https://doi.org/10.1007/978-3-319-66332-6_12	book	January 2017
Binary stirring Wartell, Richard; Mohan, Vishwath; Hamlen, Kevin W. Proceedings of the 2012 ACM conference on Computer and communications security https://doi.org/10.1145/2382196.2382216	conference	October 2012
Address Space Layout Permutation (ASLP): Towards Fine-Grained Randomization of Commodity Software Kil, Chongkyung; Jun, Jinsuk; Bookholt, Christopher 2006 22nd Annual Computer Security Applications Conference (ACSAC'06) https://doi.org/10.1109/ACSAC.2006.9	conference	December 2006
ILR: Where'd My Gadgets Go? Hiser, Jason; Nguyen-Tuong, Anh; Co, Michele 2012 IEEE Symposium on Security and Privacy https://doi.org/10.1109/SP.2012.39	conference	May 2012
Gadge me if you can Davi, Lucas Vincenzo; Dmitrienko, Alexandra; Nürnberger, Stefan Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security https://doi.org/10.1145/2484313.2484351	conference	May 2013

Similar Records

On Security of TrustZone-M-Based IoT Systems

Journal Article · 2022 · IEEE Internet of Things Journal · OSTI ID:1980406

Luo, Lan; Zhang, Yue; White, Clayton; +7 more

On Manually Reverse Engineering Communication Protocols of Linux-Based IoT Systems

Journal Article · 2021 · IEEE Internet of Things Journal · OSTI ID:1848951

Liu, Kaizheng; Yang, Ming; Ling, Zhen; +4 more

Secure boot, trusted boot and remote attestation for ARM TrustZone-based IoT Nodes

Journal Article · 2021 · Journal of Systems Architecture · OSTI ID:1977682

Ling, Zhen; Yan, Huaiyu; Shao, Xinhui; +4 more

Related Subjects

Computer Science
Engineering
Telecommunications

fASLR: Function-Based ASLR via TrustZone-M and MPU for Resource-Constrained IoT Systems

Citation Formats

References (14)

Similar Records

Related Subjects