Security protection and checking in embedded system integration against buffer overflow attacks, in

With more embedded systems networked, it becomes an important research problem to effectively defend embed-ded systems against buffer overflow attacks and efficiently check if systems have been protected. In this paper, we pro-pose the HSDefender (Hardware/Software Defender) tech-nique that considers the protection and checking together to solve this problem. Our basic idea is to design a secure instruction set and require third-party software developers to use secure instructions to call functions. Then the se-curity checking can be easily performed by system integra-tors even without the knowledge of the source code. We first classify buffer overflow attacks into two categories, stack smashing attacks and function pointer attacks, and then provide two corresponding defending strategies. We analyze the HSDefender technique in respect of hardware cost, security, and performance, and experiment with it on the SimpleScalar/ARM simulator using benchmarks from MiBench. The results show that HSDefender can defend a system against more types of buffer overflow attacks with less overhead compared with the previous work.