CPU微结构中侦测和防止缓冲区溢出的实现.pdfVIP

第26卷　第2期 Vol. 26, No. 2 　 　　　　　　　　 2006 年5 月 RESEARCH PROGRESS OF SSE M y , 2006 CPU 陈志强　严晓浪 ( V LSI , , 310027) 2004-09-10 , 2004-11-01 : CPU , , , , , , , CPU , , : ; ; ; : T N47: A : 1000-3819( 2006) 02-2 14-06 Hardware Solution for Detection and Prevention - of Buffer Overflow Attacks in CPU Micro architecture CHEN Zhiqi ngYAN Xi ol ng ( VL S I D esig n I nst it ute of Zhej iang Univ er sity , H angz hou , 310027, CH N ) Abstract: A new h rdw re solution for detection nd prevention of st ck-sm shing tt cks is . . pr oposed A number is kept s key in CPU to encrypt return ddress T he cipher retur n ddress is inserted betw een st ck fr mes, nd the pl in return ddr ess is pushed to st ck s convention l. If the tw o retur n ddresses lo ded b ck mism tch w hen subroutine returns, buffer overflow is then detected nd ex ception is incurred to prevent m licious tt ck. All the excessive st ck oper tions re implemented by dding specific h rdw re circuits in CPU . T hese oper tions nd h r dw re modific tion re tr nsp r ent to softw re. The perform nce over he d c n be ignored due to p r llel ex ecution units in the CPU rchitecture. : ; ; - ; Key words buffer overflow CPU micro architecture inte rated circuit EEACC: 1265F