Selfie: User-defined Sensitive Memory Protection and Recovery

TL;DR

Selfie is a flexible, user-defined memory protection system that detects and recovers from memory corruption, prioritizing sensitive data according to user specifications and analyzing potential future impacts.

Contribution

Selfie introduces a hybrid approach combining runtime protection and symbolic analysis to safeguard user-defined sensitive memory during program execution.

Findings

Provides a flexible memory protection framework based on user requirements.

Enables recovery decisions based on the sensitivity of corrupted memory.

Uses symbolic solving to assess potential future impact of memory corruption.

Abstract

Different users always have different requirement for sensitive memory definition. It is not flexible for aborting program execution once detecting memory corruption. Because the users may loose some sensitive data. We presented Selfie, a hybrid solution to provide one flexible solution to protect the sensitive memory according to users' requirements in runtime. Finally, Selfie can provide one solution to decide whether execution needs to be recovered. If the memory corruption doesn't belong sensitive memory, Selfie provides symbolic solver that can help figure out whether the memory corruption can affect the sensitive memory in future.