Hardware-Assisted Program Execution Integrity: HAPEI

Ronan Lashermes (1) , Hélène Le Bouder (2, 3) , Gaël Thomas (4)

1 SED [Rennes] - Service Expérimentation et Développement
2 OCIF - Objets communicants pour l'Internet du futur
3 IMT Atlantique - SRCD - Département Systèmes Réseaux, Cybersécurité et Droit du numérique
4 IMT Atlantique - IMT Atlantique

Even if a software is proven sound and secure, an attacker can still insert vulnerabilities with fault attacks. In this paper, we propose HAPEI, an Instruction Set Randomization scheme to guarantee Program Execution Integrity even in the presence of hardware fault injection. In particular, we propose a new solution to the multi-predecessors problem. This scheme is then implemented as a hardened CHIP-8 virtual machine, able to ensure program execution integrity, to prove the viability and to explore the limits of HAPEI.

Mots clés: Instruction Set Randomization; Control Flow Integrity; Program Execution Integrity; Hardware Fault Attacks

Domaines: Cryptographie et sécurité [cs.CR]

Ronan Lashermes, Hélène Le Bouder, Gaël Thomas. Hardware-Assisted Program Execution Integrity: HAPEI. NordSec 2018 : 23rd Nordic Conference on Secure IT Systems, Nov 2018, Oslo, Norway. ⟨10.1007/978-3-030-03638-6_25⟩. ⟨hal-01978181⟩