Recently, code reuse attacks (CRAs), such as return-oriented programming (ROP) and jump-oriented programming (JOP), have emerged as a new class of ingenious security threatens. Attackers can utilize CRAs to hijack the control flow of programs to perform malicious actions without injecting any codes. Many defenses, classed into software-based and hardware-based, have been proposed. However, software-based methods are difficult to be deployed in practical systems due to high performance overhead. Hardware-based methods can reduce performance overhead but may require extending instruction set architectures (ISAs) and modifying compiler or suffer the vulnerability of key leakage. To tackle these issues, this paper proposes a new hardware-based control flow checking method to resist CRAs with negligible performance overhead without extending ISAs, modifying compiler and leaking the encryption/decryption key. The key technique involves two control flow checking mechanisms. The first one is the encrypted Hamming distances (EHDs) matching between the physical unclonable function (PUF) response and the return addresses, which prevents attackers from returning between gadgets so long as the PUF response is secret, thus resisting ROP attacks. The second one is the liner encryption/decryption operation (XOR) between PUF response and the instructions at target addresses of call and jmp instructions to defeat JOP attacks. Advanced return-based full-function reuse attacks will be prevented with the dynamic key-updating method. Experimental evaluations on benchmarks demonstrate that the proposed method introduces negligible 0.95% run-time overhead and 0.78% binary size overhead on average.
On the Security of A Remote Cloud Storage Integrity Checking Protocol
数据安全和隐私是云计算中一个重要但具有挑战性的问题。云用户的安全问题之一是如何有效地验证存储在云服务器上的数据的完整性。第三方审计（TPA）是近年来为实现这一目标而提出的一种新技术。在最近的论文（IEEE Transactions on Computers 62（2）：362-375（2013））中，Wang等人提出了一种高效且可扩展的TPA协议，以及可以防止离线猜测攻击的零知识公共审计协议。然而，在本文中，我们指出了Wang等人的协议中的几个安全弱点：首先，我们证明了攻击者可以在完整性检查过程中任意修改云数据而不被审计者发现，并且攻击者甚至可以在不知道云数据的内容或云服务器维护的任何验证元数据的情况下实现这一目标;其次，我们证明了零知识公共审计协议不能达到其设计目标，即防止离线猜测攻击。
Invisible Manipulation Channels in AI-Assisted Financial Advisory: Implications for Market Integrity and Regulatory Design
College of Economics and Management, Northwest A&F University（西北农林科技大学经济管理学院）；School of Agricultural Economics and Rural Development, Renmin University of China（中国人民大学农业经济与农村发展学院）；Fujian Provincial Key Laboratory of Automotive Electronics and Electric Drive, School of Electronic, Electrical and Physics, Fujian University of Technology（福建理工大学电子电气与物理学院，福建省汽车电子与电驱动重点实验室）
Selection Integrity for LLM Graph Memory: An Accumulability Criterion for Information-Flow-Blind Retrieval
University of Technology Sydney（悉尼科技大学）；National University of Singapore（新加坡国立大学）；University of Sheffield（谢菲尔德大学）；University of New South Wales（新南威尔士大学）
