#IUBIK leverages memory tagging (MTE) and pointer authentication (PA), available in #ARM CPUs, to efficiently and effectively isolate attacker-controlled input from security-critical data in the kernel heap.
#iubik #mte #pac #arm #brownssl #browncs #ieeesp2025
#IUBIK hardens OS kernel code against attacks that (ab)use memory errors via means of: (1) attacker-controlled input isolation, (2) memory tagging (ARM MTE), and pointer encryption (ARM PA).
✳️ cs.brown.edu/~vpk/papers/...
💾 github.com/tum-itsec/iu... (soon)
#iubik #mte #pac #arm #brownssl #browncs
If you're attending the IEEE Symposium on Security and Privacy 2025 and interested in OS/kernel (self-)protection, please stop by the "Memory Safety" track today (Session 3, Track 3, 1PM--2:30PM in Bayview AB) to hear more about #IUBIK from Marius Momeu!
#ieeesp2025 #iubik
