A Hardware Protection Device against Buffer Overflow Attack

Abstract

The invention provides a hardware protection module aiming at overflow attacks of a buffer area. The hardware protection module is directly connected with a processor to monitor an executing process of a program, and consists of four parts including a serial peripheral interface module namely an SPI module, a processor interface module, a memory control module and a security label module, wherein the memory control module is a kernel module, other modules are connected by taking the memory control module as a center, the SPI module provides a data download interface for the memory control module, the processor interface module provides a processor interface for the memory control module, and the security label module performs encryption processing on data stored in the memory control module. The security of the hardware protection module provided by the invention is stronger than that of general software protection, and meanwhile, the hardware protection module reduces the overhead of hardware resources, does not occupy memory resources of a system, is high in execution efficiency, has good portability, and can adapt to processors with different frameworks by only modifying a few key parameters.

Description

technical field [0001] The invention provides a hardware protection device for buffer overflow attack, which relates to a hardware protection device for buffer overflow attack of an embedded processor. The invention belongs to the technical field of embedded system security. Background technique [0002] Buffer overflow is a very common and dangerous vulnerability, and has become one of the most important security threats today. In various security reports, buffer overflow vulnerabilities are always a very important part. Buffer overflow attacks are easily exploited by attackers, because languages ​​such as C and C++ do not automatically detect buffer overflow operations, and it is difficult for programmers to always check whether buffer overflows may occur when writing code. Using overflow, attackers can write desired data anywhere in the vulnerable program memory, even including key data that controls the program execution flow (such as the return address after a functio...

AI Technical Summary

Problems solved by technology

[0005] (1) The above protection methods against buffer overflow attacks are all from the perspective of software, which will increase the complexity of the software, and the code itself as the protection function is also the object of attack, which cannot resist physical attacks

[0006] (2) The current defense method will increase the burden on the system and affect the performance of the processor

At the same time, it is also easy to cause the program to crash when running

Images