Skip to Main Content (Press Enter)

Logo UNIMI
  • ×
  • Home
  • Persone
  • Attività
  • Ambiti
  • Strutture
  • Pubblicazioni
  • Terza Missione

Expertise & Skills
Logo UNIMI

|

Expertise & Skills

unimi.it
  • ×
  • Home
  • Persone
  • Attività
  • Ambiti
  • Strutture
  • Pubblicazioni
  • Terza Missione
  1. Pubblicazioni

EmbedWatch: Fat Pointer Solution for Detecting Spatial Memory Errors in Embedded Systems

Contributo in Atti di convegno
Data di Pubblicazione:
2024
Citazione:
EmbedWatch: Fat Pointer Solution for Detecting Spatial Memory Errors in Embedded Systems / D. Rusconi, M. Zoia, L. Buccioli, F. Pierazzi, D. Bruschi, L. Cavallaro, F. Toffalini, A. Lanzi - In: CPSIoTSec'24: Proceedings / [a cura di] K. Fawaz, M. Almgren. - [s.l] : ACM, 2024 Nov 22. - ISBN 979-8-4007-1244-9. - pp. 55-67 (( Intervento presentato al 6. convegno CPS&IoT Security and Privacy tenutosi a Salt Lake City nel 2024 [10.1145/3690134.3694815].
Abstract:
This paper introduces EmbedWatch, an innovative crash reporting system specifically designed for embedded devices. EmbedWatch integrates fat pointer principles with remote attestation, efficiently addressing spatial memory errors across various memory segments, including stack, heap, and global variables. The system's notable feature is its vulnerability analysis capability, which precisely pinpoints the exact code segment responsible for an error, significantly enhancing error detection and resolution accuracy. We assess the effectiveness and practicality of EmbedWatch by evaluating realworld firmware and CWEs. We show that EmbedWatch accurately detects the vulnerability analysis of spatial memory errors in the analyzed firmware with a negligible overhead range (0.01% - 2.33%), geometric mean 0.228 +0.4% encryption protocol.
Tipologia IRIS:
03 - Contributo in volume
Keywords:
Embedded Security; Remote Attestation; Memory Safety; Program Analysis; Protection Mechanisms
Elenco autori:
D. Rusconi, M. Zoia, L. Buccioli, F. Pierazzi, D. Bruschi, L. Cavallaro, F. Toffalini, A. Lanzi
Autori di Ateneo:
BRUSCHI DANILO MAURO ( autore )
LANZI ANDREA ( autore )
RUSCONI DAVIDE ( autore )
ZOIA MATTEO ( autore )
Link alla scheda completa:
https://air.unimi.it/handle/2434/1121851
Link al Full Text:
https://air.unimi.it/retrieve/handle/2434/1121851/2600230/3690134.3694815.pdf
Titolo del libro:
CPSIoTSec'24: Proceedings
Progetto:
SEcurity and RIghts in the CyberSpace (SERICS)
  • Aree Di Ricerca

Aree Di Ricerca

Settori


Settore INFO-01/A - Informatica
  • Informazioni
  • Assistenza
  • Accessibilità
  • Privacy
  • Utilizzo dei cookie
  • Note legali

Realizzato con VIVO | Progettato da Cineca | 25.11.5.0