Fine-grained Internet of Things equipment control flow protection method

Abstract

The invention discloses an Internet of Things equipment control flow protection method. The control flow protection method comprises the following steps: (1) initializing equipment; (2) encrypting aninstruction; (3) judging the instruction; (4) acquiring an authentication code; (5) matching the authentication code; (6) de-encrypting the instruction. According to the invention, a cryptography-based method is used to protect integrity of the control flow of the execution program of the Internet of Things equipment, and the safety of the equipment during operation is effectively ensured; throughadoption of a method based on authentication code matching, protection of a return address is realized, and meanwhile, security of keys is ensured; meanwhile, by designing an encryption and decryption mechanism, the verification of the indirect jump instruction is realized, and the verification efficiency is improved; in addition, the design of a springboard is added, so that robustness of the scheme is greatly improved; control flow related information is added in calculation, encryption and decryption of the authentication code, so that protection granularity is enhanced, and runtime attackfaced by the equipment can be more comprehensively defended.

Description

technical field [0001] The invention belongs to the technical field of the Internet of Things and information security, and specifically relates to a control flow protection method of an Internet of Things device. Background technique [0002] Internet of Things (IoT) devices have been widely used in many important fields such as transportation, medicine, smart grid, smart city, industrial control, etc. However, while these IoT devices are convenient for us, they also pose a threat to user privacy and production security. IoT devices are often embedded devices with limited storage and computing resources and weak security defense capabilities. When they are connected to the Internet, the attack surface of attackers is increased, making IoT devices vulnerable to attacks. These attacks may lead to the paralysis of the industrial chain or the disclosure of private information. Runtime attacks, such as code reuse attacks, are among the most advanced attacks, which can hijack t...

AI Technical Summary

Problems solved by technology

[0004] However, there are still some defects in the existing cryptography-based device control flow integrity check scheme: 1) Coarse-grained check mechanism

Since all encryption and decryption are based on the same key, these illegal return addresses can also be successfully decrypted, thereby bypassing the control flow inspection mechanism and launching code reuse attacks

2) The encryption method is too simple

Images