When Memory Mappings Attack: On the (Mis)use of the ARM Cortex-M FPB Unit

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Shan, Haoqi, Sullivan, Dean, Arias, Orlando
Format: Preprint
Veröffentlicht: 2023
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866916110772731904
author Shan, Haoqi
Sullivan, Dean
Arias, Orlando
author_facet Shan, Haoqi
Sullivan, Dean
Arias, Orlando
contents In recent years we have seen an explosion in the usage of low-cost, low-power microcontrollers (MCUs) in embedded devices around us due to the popularity of Internet of Things (IoT) devices. Although this is good from an economics perspective, it has also been detrimental for security as microcontroller-based systems are now a viable attack target. In response, researchers have developed various protection mechanisms dedicated to improve security in these resource-constrained embedded systems. We demonstrate in this paper these defenses fall short when we leverage benign memory mapped design-for-debug (DfD) structures added by MCU vendors in their products. In particular, we utilize the Flash Patch and Breakpoint (FPB) unit present in the ARM Cortex-M family to build new attack primitives which can be used to bypass common defenses for embedded devices. Our work serves as a warning and a call in balancing security and debug structures in modern microcontrollers.
format Preprint
id arxiv_https___arxiv_org_abs_2312_13189
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle When Memory Mappings Attack: On the (Mis)use of the ARM Cortex-M FPB Unit
Shan, Haoqi
Sullivan, Dean
Arias, Orlando
Cryptography and Security
In recent years we have seen an explosion in the usage of low-cost, low-power microcontrollers (MCUs) in embedded devices around us due to the popularity of Internet of Things (IoT) devices. Although this is good from an economics perspective, it has also been detrimental for security as microcontroller-based systems are now a viable attack target. In response, researchers have developed various protection mechanisms dedicated to improve security in these resource-constrained embedded systems. We demonstrate in this paper these defenses fall short when we leverage benign memory mapped design-for-debug (DfD) structures added by MCU vendors in their products. In particular, we utilize the Flash Patch and Breakpoint (FPB) unit present in the ARM Cortex-M family to build new attack primitives which can be used to bypass common defenses for embedded devices. Our work serves as a warning and a call in balancing security and debug structures in modern microcontrollers.
title When Memory Mappings Attack: On the (Mis)use of the ARM Cortex-M FPB Unit
topic Cryptography and Security
url https://arxiv.org/abs/2312.13189