Hardware-Assisted Fine-Grained Control-Flow Integrity - Adding Lasers to Intel's CET/IBT

This talk presents a prototype for hardware-assisted fine-grained control-flow integrity using Intel CET/IBT. It covers cross-DSO support methods and evaluates the implementation with SPEC CPU 2017 and space-overhead measurements.

Syllabus

SECURITY SUMMIT
Memory Corruption Bugs Enable controllow hiacking
Coarse-Grained Control-Flow Integrity Forward-edges
Fine-Grained Control-Flow Integrity Prototype matching-based implementations
Regular Assembly Code
IBT Assembly Code
FinelBT Cross-DSO support Method 1 - FinelBT Global Flag
FinelBT PLT Assembly Code
FinelBT Cross-DSO support Method 2 - Consulting Shadow Stack (under development)
FinelBT Other perks
FinelBT Implementation
Test Sets
SPEC CPU 2017 (nc)
Space Overheads
Hypotheses
Important People Thank you!