Position paper:GPT conjecture:understanding the trade-offs between granularity,performance and timeliness in control-flow integrity  

作　　者：Zhilong Wang Peng Liu 

机构地区：[1]The Pennsylvania State University,State College,USA

出　　处：《Cybersecurity》2022年第1期1-9,共9页网络空间安全科学与技术（英文）

基　　金：supported by ARO W911NF-13-1-0421(MURI),NSF CNS-1814679,NSF CNS-2019340.

摘　　要：Performance/security trade-off is widely noticed in CFI research,however,we observe that not every CFI scheme is subject to the trade-off.Motivated by the key observation,we ask three questions:1does trade-off really exist in different CFI schemes?2if trade-off do exist,how do previous works comply with it?3how can it inspire future research?Although the three questions probably cannot be directly answered,they are inspiring.We find that a deeper understanding of the nature of the trade-off will help answer the three questions.Accordingly,we proposed the GPT conjecture to pinpoint the trade-off in designing CFI schemes,which says that at most two out of three properties(fine granularity,acceptable performance,and preventive protection)could be achieved.

关 键 词：CONJECTURE Control-flow integrity Trade-off 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]