128-Bit Addressing in RISC-V and Security

More documents

Recommendations

Info

Security & Facts • Computer Virtual Address’s (VA) span to local disk only – Disk Access is now Global (In pracCce) – Remember a VA references DISK explicitly NOT main memory (CS101) • Network Addressing (IPv4 & IPv6 span the enCre network) – IPv6 created a 128 bit network address space. Unique names • MAC and URL’s addresses are unique • EMAIL addresses are unique • Phone numbers are global; country code, city code, local code • Two different (web and local) address structures – Two different protecCon and addressing systems – Two different authenCcaCon systems • Soxware needed to bridge these two domains (too much soxware) • What if one unified name structure could be developed? 2016 _NOV _RISCV_WORKSHOP 8
ProtecCon ObjecCves • The original moCvaCon for puyng protecCon mechanisms into computer systems was to keep one user’s (program) malice or error from harming other users (program). Harm can be inflicted in several ways: – a) By destroying or modifying another user’s (program) data. – b) By reading or copying another user’s (program) data without permission. – c) By degrading the service another user (program) gets, for example, using up all the disk space or geyng more than a fair share of the processing Cme [1] Lampson, ProtecCon. Proc. 5th Princeton Conf. on Informa2on Sciences and Systems, Princeton, 1971 2016 _NOV _RISCV_WORKSHOP 9
Page 1 and 2: 128-Bit Addressing in RISC-V and Se
Page 3 and 4: Background • Since the late 70’
Page 5 and 6: What Happened • MulCcs at MIT - U
Page 7: Going Forward • There Time is to
Page 11 and 12: Previous Efforts • Another soluCo
Page 13 and 14: Strawman - RV128I OBJECT ID Byte Of
Page 15 and 16: What is a Object ? • A Object is
Page 17 and 18: AuthenCcaCon • The address space
Page 19 and 20: Memory Management • Each object c
Page 21 and 22: 64 BIT LINUX -Memory Management Pro
Page 23 and 24: Exascale Issues • Subject to cost
Page 25 and 26: 128- BIT VIRTUAL ADDRESSING -Protec
Page 27 and 28: ACL (Access Control List) - ENTRY P
Page 29 and 30: REFERENCE MONITOR • It must valid
Page 31 and 32: Summary • Compare to CHERI [12] -
Page 33 and 34: References • [12] Robert N.M. Wat
Page 35 and 36: RevocaCon • Every client has a
Page 37 and 38: Some Object UID Math • 60 seconds
Page 39 and 40: ProtecCon in Unified Name Space •
Page 41: Shadow Stack - Architecture Return

128-Bit Addressing in RISC-V and Security

Create successful ePaper yourself

Delete template?

Save as template?