Published May 17, 2024 | Version v1
Poster Open

VITAMIN-V: Virtual Environment and Tool-Boxing for Trustworthy Development of RISC-V-Based Cloud Services: Hardware-based Stack Buffer Overflow Attack Detection on RISC-V Architectures

  • 1. Politecnico di Torino
  • 1. Politecnico di Torino
  • 2. ROR icon Universitat Politècnica de Catalunya
  • 3. ROR icon National and Kapodistrian University of Athens

Description

Vitamin-V aims to develop a complete RISC-V open-source software stack for cloud services with iso-performance to the cloud-dominant x86 counterpart and a powerful virtual execution environment for software development, validation, verification, and testing.

This study evaluates how well hardware-based methods detect stack buffer overflow (SBO) attacks in RISC-V systems. We conducted simulations on the PULP platform and examined micro-architecture events using semi-supervised anomaly detection techniques. The findings indicate that for a malicious function comprising 1% of the application size, detection accuracies exceeded 90% for AES, RSA (with fixed prime numbers), SHA, and Dijkstra applications. This approach presents compelling benefits that could enhance security of RISC-V-based systems.

Files

VITAMIN-V-Poster.pdf

Files (2.5 MB)

Name Size Download all
md5:8bb6b35e8bcc34127d18b2dd0a9c545b
2.5 MB Preview Download

Additional details

Funding

European Commission
VITAMIN-V: Virtual Environment and Tool-Boxing for Trustworthy Development of RISC-V-Based Cloud Services 101093062