基于ARM架构的信息流追踪系统的设计与实现  

Design and Implementation of an Information Flow Tracking System Based on ARM Architecture

作　　者：施祖清[1] 张涛[1] 王金双[1] 姚金魁[1] 袁志坚[1] 

机构地区：[1]解放军理工大学指挥自动化学院,江苏南京210007

出　　处：《计算机技术与发展》2012年第6期147-150,共4页Computer Technology and Development

基　　金：国家高技术研究发展计划"863"项目(2009AA01Z40)

摘　　要：当前,智能手机平台面临着众多的安全威胁。动态信息流追踪是一种能够检测缓冲区溢出等安全威胁的有效技术。文中分析了动态信息流追踪技术的基本原理,设计并实现了基于ARM架构的信息流追踪系统。该系统通过在页表项上扩展添加污点标记位来标识来自不可信数据源的数据,扩充ARM架构指令集,在指令层追踪数据的传播过程并相应地完成污点传播。当系统跳转到来自不可信数据源的内存段执行时,CPU将产生异常通知用户,根据系统安全策略决定是否允许该操作继续执行。研究表明该系统能够有效实现ARM架构智能平台的安全防护。At present,smartphone platform is facing numerous security threats. Dynamic information flow tracking （DIFT） is an effective technique for detecting buffer overflow. It analyzed the basic principle of DIFT, designed and implemented an information tracking system for the ARM architecture. A taint marking bit was added to the page table entry, which was used to indicate data coming from untrusted source. The ARM instruction set was expanded to track the taint propagation accompanied with the propagation of the data. CPU will throw exceptions when the system jumps to memory segments containing data from untrusted source,and enforce the access decision according to system security policy. Thus the system can be protected from attacks originated from buffer overflows etc.

关 键 词：信息流追踪 ARM架构 页表项 指令层 污点 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]