Position paper: GPT conjecture: understanding the trade-offs between granularity, performance and timeliness in control-flow integrity  

作　　者：Zhilong Wang Peng Liu 

机构地区：[1]The Pennsylvania State University,State College,USA

出　　处：《Cybersecurity》2022年第2期1-9,共9页网络空间安全科学与技术（英文）

基　　金：This work was supported by ARO W911NF-13-1-0421 (MURI), NSF CNS-1814679, and NSF CNS-2019340.

摘　　要：Performance/security trade-off is widely noticed in CFI research, however, we observe that not every CFI scheme is subject to the trade-off. Motivated by the key observation, we ask three questions: ➊ does trade-off really exist in different CFI schemes? ➋ if trade-off do exist, how do previous works comply with it? ➌ how can it inspire future research? Although the three questions probably cannot be directly answered, they are inspiring. We find that a deeper understanding of the nature of the trade-off will help answer the three questions. Accordingly, we proposed the GPT conjecture to pinpoint the trade-off in designing CFI schemes, which says that at most two out of three properties (fine granularity, acceptable performance, and preventive protection) could be achieved.

关 键 词：CONJECTURE Control-flow integrity Trade-off 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]