2026-07-22T06:50:05Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:16335 2024-03-06T10:57:41Z ddc:004 open_access

RT-DFI: Optimizing Data-Flow Integrity for Real-Time Systems Bellec, Nicolas Hiet, Guillaume Rokicki, Simon Tronel, Frederic Puaut, Isabelle Real-time system Software security Data-flow integrity Worst-case execution time The emergence of Real-Time Systems with increased connections to their environment has led to a greater demand in security for these systems. Memory corruption attacks, which modify the memory to trigger unexpected executions, are a significant threat against applications written in low-level languages. Data-Flow Integrity (DFI) is a protection that verifies that only a trusted source has written any loaded data. The overhead of such a security mechanism remains a major issue that limits its adoption. This article presents RT-DFI, a new approach that optimizes Data-Flow Integrity to reduce its overhead on the Worst-Case Execution Time. We model the number and order of the checks and use an Integer Linear Programming solver to optimize the protection on the Worst-Case Execution Path. Our approach protects the program against many memory-corruption attacks, including Return-Oriented Programming and Data-Only attacks. Moreover, our experimental results show that our optimization reduces the overhead by 7% on average compared to a state-of-the-art implementation. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Nicolas Bellec and Guillaume Hiet and Simon Rokicki and Frederic Tronel and Isabelle Puaut 2022 Is Part Of LIPIcs, Volume 231, 34th Euromicro Conference on Real-Time Systems (ECRTS 2022) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/LIPIcs.ECRTS.2022.18 urn:nbn:de:0030-drops-163351 https://drops.dagstuhl.de/entities/document/10.4230/LIPIcs.ECRTS.2022.18 eng https://creativecommons.org/licenses/by/4.0/legalcode