Position paper:GPT conjecture:understanding the trade‑offs between granularity,performance and timeliness in control‑flow integrity  

作　　者：Zhilong Wang Peng Liu 

机构地区：[1]The Pennsylvania State University,State College,USA

出　　处：《Cybersecurity》2021年第1期519-527,共9页网络空间安全科学与技术（英文）

基　　金：ARO W911NF-13-1-0421(MURI);NSF CNS-1814679;NSF CNS-2019340.

摘　　要：Performance/security trade-off is widely noticed in CFI research,however,we observe that not every CFI scheme is subject to the trade-off.Motivated by the key observation,we ask three questions:➊does trade-off really exist in different CFI schemes?➋if trade-off do exist,how do previous works comply with it?➌how can it inspire future research?Although the three questions probably cannot be directly answered,they are inspiring.We find that a deeper understanding of the nature of the trade-off will help answer the three questions.Accordingly,we proposed the GPT conjecture to pinpoint the trade-off in designing CFI schemes,which says that at most two out of three properties(fine granularity,acceptable performance,and preventive protection)could be achieved.

关 键 词：CONJECTURE Control-flow integrity Trade-off 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]