This paper introduces EmbedWatch, an innovative crash reporting system specifically designed for embedded devices. EmbedWatch integrates fat pointer principles with remote attestation, efficiently addressing spatial memory errors across various memory segments, including stack, heap, and global variables. The system's notable feature is its vulnerability analysis capability, which precisely pinpoints the exact code segment responsible for an error, significantly enhancing error detection and resolution accuracy. We assess the effectiveness and practicality of EmbedWatch by evaluating realworld firmware and CWEs. We show that EmbedWatch accurately detects the vulnerability analysis of spatial memory errors in the analyzed firmware with a negligible overhead range (0.01% - 2.33%), geometric mean 0.228 +0.4% encryption protocol.
EmbedWatch: Fat Pointer Solution for Detecting Spatial Memory Errors in Embedded Systems / D. Rusconi, M. Zoia, L. Buccioli, F. Pierazzi, D. Bruschi, L. Cavallaro, F. Toffalini, A. Lanzi - In: CPSIoTSec'24: Proceedings / [a cura di] K. Fawaz, M. Almgren. - [s.l] : ACM, 2024. - ISBN 979-8-4007-1244-9. - pp. 55-67 (( Intervento presentato al 6. convegno CPS&IoT Security and Privacy tenutosi a Salt Lake City nel 2024 [10.1145/3690134.3694815].
EmbedWatch: Fat Pointer Solution for Detecting Spatial Memory Errors in Embedded Systems
D. RusconiPrimo
;M. ZoiaSecondo
;L. Buccioli;D. Bruschi;L. Cavallaro;A. LanziUltimo
2024
Abstract
This paper introduces EmbedWatch, an innovative crash reporting system specifically designed for embedded devices. EmbedWatch integrates fat pointer principles with remote attestation, efficiently addressing spatial memory errors across various memory segments, including stack, heap, and global variables. The system's notable feature is its vulnerability analysis capability, which precisely pinpoints the exact code segment responsible for an error, significantly enhancing error detection and resolution accuracy. We assess the effectiveness and practicality of EmbedWatch by evaluating realworld firmware and CWEs. We show that EmbedWatch accurately detects the vulnerability analysis of spatial memory errors in the analyzed firmware with a negligible overhead range (0.01% - 2.33%), geometric mean 0.228 +0.4% encryption protocol.File | Dimensione | Formato | |
---|---|---|---|
3690134.3694815.pdf
accesso aperto
Tipologia:
Publisher's version/PDF
Dimensione
1.25 MB
Formato
Adobe PDF
|
1.25 MB | Adobe PDF | Visualizza/Apri |
Pubblicazioni consigliate
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.