Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Jinjiang Tu

dblp:387/4456 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Systems and software security · 100%
Software engineering, system software, and programming languages
1 paper
Operating systems · 100%

Topics — the 5 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security › return-oriented programming defense
code reuse attack defense
0.812024
kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024
Systems and software security › memory safety
control-flow integrity
0.812024
kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024
Systems and software security
memory safety
0.812024
kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024
Systems and software security › memory safety
pointer integrity
0.812024
kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024
Operating systems › system security › operating system security
kernel security
0.212024
kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024

Methods — techniques the papers use, named apart from their topics

merkle tree · 1.5ARM pointer authentication · 1.5
YearPublicationVenuePosition
2024 kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels
abstract
Nowadays, code reuse attacks impose a substantial threat to the security of operating system kernels. Control-flow graph-based CFI techniques, while effective, bring considerable performance overhead, thus limiting their practical adoption in real-world products. As an alternative approach, recent research suggests safeguarding the integrity of sensitive pointers as a countermeasure against manipulation attempts. Unfortunately, existing pointer integrity protection schemes only protect sensitive pointers partially and ignore assembly code, leaving protection gaps. To fill up these protection gaps, we propose a novel security concept namedfull life-cycle integrity, which enforces the integrity of a sensitive pointer at every step on its value flow chain. To realize full life-cycle integrity, we propose three novel techniques, including assembly-aware sensitivity for analyzing assembly code, Merkle PAC tree for protecting interrupt context securely and efficiently, and pointer-grained authentication for defeating spatial substitution attacks. We have developed a practical implementation of comprehensive life-cycle integrity for the Linux kernel, called ”kernel Code Pointer Authentication” (kCPA), which leverages the ARM Pointer Authentication (PAuth) mechanism. This implementation has been extended to the Apple M1 architecture for real-world evaluation on PAuth hardware. Our assessment demonstrates that kCPA effectively mitigates a range of real-world attacks while incurring a minimal 2.5% performance overhead for the Phoronix Test Suite and nearly negligible performance impact for SPEC2017 benchmarks.
Yutian Yang, Jinjiang Tu, Wenbo Shen, Songbo Zhu, Yajin Zhou
IEEE Trans. Dependable Secur. Comput.2