驯服内存战争：一种针对CPS内存安全攻击的弹性缓解策略
Taming the War in Memory: A Resilient Mitigation Strategy Against Memory Safety Attacks in CPS
摘要：
内存安全攻击已经成为计算机系统面临的最严重的威胁之一。虽然针对这些攻击已经开发了各种各样的防御技术，但现有的缓解策略存在一些局限性。特别是，大多数现有的缓解方法是基于中止或重新启动受害者程序时，检测到内存安全攻击，从而使系统不可用。这在具有严格的时间约束的系统中可能是不可接受的，例如网络物理系统（CPS），因为系统不可用使控制系统处于不安全状态。为了解决这个问题，我们提出了CIMA -一种弹性和轻量级的缓解技术，防止在运行时无效的内存访问。CIMA操纵编译器生成的控制流图，在运行时自动检测和绕过不安全的内存访问，从而减轻进程中的内存安全攻击。CIMA的一个吸引人的特性是，即使在存在内存安全攻击的情况下，它也可以确保CPS的系统可用性和弹性。为此，我们设计了一个现实的安全水处理（SWaT）和安全的城市交通系统（SecUTS）测试平台的基础上，我们的实验装置和评估我们的方法的有效性和效率。实验结果表明，CIMA处理内存安全攻击有效，开销低。此外，它满足测试中CPS的实时约束和物理状态弹性。
英文摘要：
Memory-safety attacks have been one of the most critical threats against computing systems. Although a wide-range of defense techniques have been developed against these attacks, the existing mitigation strategies have several limitations. In particular, most of the existing mitigation approaches are based on aborting or restarting the victim program when a memory-safety attack is detected, thus making the system unavailable. This might not be acceptable in systems with stringent timing constraints, such as cyber-physical systems (CPS), since the system unavailability leaves the control system in an unsafe state. To address this problem, we propose CIMA -- a resilient and light-weight mitigation technique that prevents invalid memory accesses at runtime. CIMA manipulates the compiler-generated control flow graph to automatically detect and bypass unsafe memory accesses at runtime, thereby mitigating memory-safety attacks along the process. An appealing feature of CIMA is that it also ensures system availability and resilience of the CPS even under the presence of memory-safety attacks. To this end, we design our experimental setup based on a realistic Secure Water Treatment (SWaT) and Secure Urban Transportation System (SecUTS) testbeds and evaluate the effectiveness and the efficiency of our approach. The experimental results reveal that CIMA handles memory-safety attacks effectively with low overhead. Moreover, it meets the real-time constraints and physical-state resiliency of the CPS under test.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
