MemoryTrap: Booby Trapping Memory to Counter Memory Disclosure Attacks with...
summary
MemoryTrap compiles applications to sprinkle unreadable booby traps into code and uses Intel MPK plus a kernel exception handler to detect and stop memory disclosure in real time. Evaluation shows attackers expose only hundreds of bytes before triggering detection (average 657 B breadth first, 299 B depth first; 607 B for JIT code), booby traps are densely placed (over 86% within one cache line), and runtime cost is minimal (spec avg 1.85% average overhead, geometric mean 0.60%; pathological reads incur 3–23×).
AI-written summary · about
chapters (10)
- 0:00Memory disclosure attacks
- 2:02Limitations of XOM and DCR
- 4:11Memory Trap defense
- 5:53Booby traps in code
- 7:20Detecting trap disclosures
- 8:01Memory Trap architecture
- 9:25Security against real vulnerabilities
- 11:53Performance benchmarks
- 13:38Comparison with defenses
- 14:00Conclusion
related talks
48mCapturing 0Day Exploits With Perfectly Placed Hardware Traps
30mMicro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks
31mMemory Tagging and how it improves C/C++ memory safety
41mUsing Microarchitectural Design to Break KASLR and More
23mMeltdown: Reading Kernel Memory from User Space
18mSoftTRR: Protect Page Tables against Rowhammer Attacks using Software-only...
31mRemote Memory-Deduplication Attacks
14mIchnaea: A Framework for Precise Tracking of Memory Objects