Scholarlink

Backward edge Control-Flow Integrity (CFI) has been widely supported via user-space shadow stacks. In this paper we introduce innovative kernel shadow stacks for user-space programs. By placing itself at a higher privilege level, the information kept by the kernel shadow stack can no way be altered by the (attacked) user-level code. We provide the main hints of our implementation of the kernel shadow stack for Linux, and report data related to an assessment we carried out of our proposal.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Poster: On the Usage of Kernel Shadow Stacks for User-Level Programs

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Marco Calavaro,
  • Pasquale Caporaso,
  • Luca Capotombolo,
  • Giuseppe Bianchi,
  • Francesco Quaglia

摘要

Backward edge Control-Flow Integrity (CFI) has been widely supported via user-space shadow stacks. In this paper we introduce innovative kernel shadow stacks for user-space programs. By placing itself at a higher privilege level, the information kept by the kernel shadow stack can no way be altered by the (attacked) user-level code. We provide the main hints of our implementation of the kernel shadow stack for Linux, and report data related to an assessment we carried out of our proposal.