1. CFHider: Protecting Control Flow Confidentiality With Intel SGX.
- Author
-
Wang, Yongzhi, Zou, Yu, Shen, Yulong, and Liu, Yao
- Subjects
- *
PROGRAM transformation , *CONFIDENTIAL communications , *TRUST - Abstract
Program control flow reflects the algorithm of that program and may reveal implementation vulnerabilities. Thus its confidentiality needs to be protected, especially in a cloud setting. However, most existing control flow obfuscation methods are software-based, which cannot offer high confidentiality while maintaining low performance overhead. In this paper, we propose CFHider, a hardware-assisted solution. By performing program transformation and leveraging Trusted Execution Environments (Intel SGX), CFHider moves branch statement conditions to an opaque and trusted memory space during the program execution. We proved that by generating Obfuscation Invariants, CFHider is able to provide provable control flow confidentiality protection. Based on the design of CFHider, we also developed a prototype system for Java applications. Our security analysis and experimental results indicate that CFHider is effective in protecting control flow confidentiality and incurs a much reduced performance overhead than existing software-based solutions (by a factor of 18.1). [ABSTRACT FROM AUTHOR]
- Published
- 2022
- Full Text
- View/download PDF