Control-Flow Integrity at RISC: Attacking RISC-V by Jump-Oriented Programming. (arXiv:2211.16212v1 [cs.CR])

Web: http://arxiv.org/abs/2211.16212

RISC-V is an open instruction set architecture recently developed for
embedded real-time systems. To achieve a lasting security on these systems and
design efficient countermeasures, a better understanding of vulnerabilities to
novel and potential future attacks is mandatory. This paper demonstrates that
RISC-V is sensible to Jump-Oriented Programming, a class of complex code-reuse
attacks, able to bypass existing protections. We provide a first analysis of
RISC-V systems' attack surface exploitable by such attacks, and show how they
can be chained …

control flow integrity programming