[HN Gopher] CGuard: Efficient Spatial Safety for C
___________________________________________________________________
CGuard: Efficient Spatial Safety for C
Author : belter
Score : 4 points
Date : 2021-07-23 16:46 UTC (6 hours ago)
(HTM) web link (arxiv.org)
(TXT) w3m dump (arxiv.org)
| belter wrote:
| https://arxiv.org/pdf/2107.10533.pdf
|
| "...Spatial safety violations are the root cause of many security
| attacks and unexpected behavior of applications. Existing
| techniques to enforce spatial safety work broadly at either
| object or pointer granularity. Object-based approaches tend to
| incur high CPU overheads, whereas pointer-based approaches incur
| both high CPU and memory overheads. SGXBounds, an object-based
| approach, is so far the most efficient technique that provides
| complete out-of-bounds protection for objects. However, a major
| drawback of this approach is that it restricts the application
| address space to 4GB. ... In this paper, we present CGuard, a
| tool that provides object-bounds protection for C applications
| with comparable overheads to SGXBounds without restricting the
| application address space...."
___________________________________________________________________
(page generated 2021-07-23 23:03 UTC)