Secure by Permission bits on Page Table

Example:

Reference 1

  • Dang
  • Q&A How to detect there is still reference pointing to a pool? What if there is a buffer overflow to the freed variable on the same page? Reference 1 Problem: Allocate only one object per physical page would be quickly exhaust physical memory. Changing the allocation in this way would potentially lead to poor cache performance in physically indexed cache. Overview: Use a new virtual page for each allocation of the program but map it to the same physical page as the original allocator.

  • HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity
  • Reference 1 reference ↩

  • Intel MPK
  • References: [1] ERIM: Secure, Efficient In-process Isolation with Memory Protection Keys (MPK), SEC, 201908. paper


  1. reference ↩
Created Oct 12, 2019 // Last Updated May 18, 2021

If you could revise
the fundmental principles of
computer system design
to improve security...

... what would you change?