arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2201.06785cs.CR
收藏

Xtensa硬件架构上面向返回的编程面临的挑战

Challenges of Return-Oriented-Programming on the Xtensa Hardware Architecture

Kai Lehniger, Marcin J. Aftowicz, Peter Langendörfer, Zoya Dyka

摘要:

本文展示了如何使用面向返回的编程(ROP)攻击Xtensa架构。所提出的技术包括两种支持的应用程序二进制接口(ABI)的可能性。特别是对于窗口ABI的一个强大的机制,不仅允许跳转到小工具,但也操纵寄存器,而不依赖于特定的小工具。本文纯粹关注如何利用架构本身的属性来链接小工具,而不是特定的攻击或小工具目录。

英文摘要:

This paper shows how the Xtensa architecture can be attacked with Return-Oriented-Programming (ROP). The presented techniques include possibilities for both supported Application Binary Interfaces (ABIs). Especially for the windowed ABI a powerful mechanism is presented that not only allows to jump to gadgets but also to manipulate registers without relying on specific gadgets. This paper purely focuses on how the properties of the architecture itself can be exploited to chain gadgets and not on specific attacks or a gadget catalog.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑