Boot Image Cloud Deployment System for Code-Reuse Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic devices with identical boot images are vulnerable to code-reuse attacks, as hackers can exploit common defects in the boot images, making them easy targets for malicious attacks.
Innovation Solution
A cloud deployment system and method that generates and deploys unique boot images for each electronic device by randomly combining and arranging object files, and optionally signing them with a private key for verification using a public key, ensuring each device receives a distinct boot image.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If same boot images are carried in electronic devices of a same model for easy management and maintenance, then ease of operation is improved, but security against code-reuse attacks deteriorates
Solution Approach 1:
The boot image is segmented into multiple object files that can be independently arranged and combined. This segmentation allows the boot image to be customized for each device while maintaining manageable components, resolving the contradiction between ease of management and security against code-reuse attacks.
Solution Approach 2:
Each electronic device receives a boot image with object files arranged in a specific sequence tailored to that device's characteristics. This local customization ensures that while the overall structure remains manageable, each device has unique boot image properties that prevent code-reuse attacks.
2Reliability
If boot images are customized for individual electronic devices to prevent code-reuse attacks, then security against code-reuse attacks is improved, but device complexity increases
Solution Approach 1:
Multiple object files are merged and combined in different sequences to create unique boot images for each device. This merging approach allows customization without significantly increasing device complexity, as the underlying components remain the same while their arrangement varies.
Solution Approach 2:
The sequence and arrangement parameters of object files are changed for each device's boot image. By modifying these parameters rather than the fundamental structure, the system achieves customization with minimal increase in device complexity.
3Reliability
If object files are randomly arranged in boot images for each electronic device, then security against code-reuse attacks is improved, but manufacturing precision requirements increase
Solution Approach 1:
The boot image configuration becomes dynamic with random object file arrangements for each device. This dynamic approach enhances security against code-reuse attacks while the system automatically manages the precision requirements through automated generation processes.
Solution Approach 2:
The system self-generates boot images with randomly arranged object files for each device without requiring external intervention. This self-service mechanism handles the manufacturing precision requirements automatically, reducing the burden on external manufacturing processes.
Data Source
AI summary
A boot image cloud deployment system and method are provided. The system includes an electronic device and a server. The server includes a storage medium and a control circuit. The electronic device is configured to issue a request instruction. The storage medium is configured to store a plurality of boot images. Each boot image includes a plurality of object files, and a combination sequence of the object files of each boot image is different from a combination sequence of the object files of the other boot images. The control circuit is configured to send back one of the boot images to the electronic device according to the request instruction. The electronic device executes the received boot image.