Sciweavers

Share
DSN
2009
IEEE

Decoupling Dynamic Information Flow Tracking with a dedicated coprocessor

9 years 4 months ago
Decoupling Dynamic Information Flow Tracking with a dedicated coprocessor
Dynamic Information Flow Tracking (DIFT) is a promising security technique. With hardware support, DIFT prevents a wide range of attacks on vulnerable software with minimal performance impact. DIFT architectures, however, require significant changes in the processor pipeline that increase design and verification complexity and may affect clock frequency. These complications deter hardware vendors from supporting DIFT. This paper makes hardware support for DIFT cost-effective by decoupling DIFT functionality onto a simple, separate coprocessor. Decoupling is possible because DIFT operations and regular computation need only synchronize on system calls. The coprocessor is a small hardware engine that performs logical operations and caches 4-bit tags. It introduces no changes to the design or layout of the main processor’s logic, pipeline, or caches, and can be combined with various processors. Using a full-system hardware prototype and realistic Linux workloads, we show that the DIF...
Hari Kannan, Michael Dalton, Christos Kozyrakis
Added 20 May 2010
Updated 20 May 2010
Type Conference
Year 2009
Where DSN
Authors Hari Kannan, Michael Dalton, Christos Kozyrakis
Comments (0)
books