Title | RSGX: Defeating SGX Side Channel Attack with Return Oriented Programming |
Publication Type | Conference Paper |
Year of Publication | 2021 |
Authors | Jinhui, Yuan, Hongwei, Zhou, Laisun, Zhang |
Conference Name | 2021 IEEE International Conference on Artificial Intelligence and Computer Applications (ICAICA) |
Date Published | jun |
Keywords | composability, Conferences, data privacy, human factors, Loading, Programming, pubcrawl, resilience, Resiliency, return oriented programming, Return Oriented Programming (ROP), ROP, rop attacks, Runtime, Scalability, Semantics, SGX, side channel attack, side-channel attacks |
Abstract | Intel SGX provides a new method to protect software privacy data, but it faces the security risk of side channel attack. In our opinion, SGX side channel attack depend on the implicit mapping between control flow and data flow to infer privacy data indirectly with control flow. For this reason, we propose code reuse to construct dynamic control flow software. In this method, by loading a large number of related gadgets in advance, the software reset the software control data according to the original software semantics at runtime, so that the software control flow can change dynamically heavily. Based on code reuse, we make the software control flow change dynamically, and the mapping between control flow and data flow more complex and difficult to determine, which can increase the difficulty of SGX side channel attack. |
DOI | 10.1109/ICAICA52286.2021.9498147 |
Citation Key | jinhui_rsgx_2021 |