DMAAUTH: A Lightweight Pointer Integrity-based Secure Architecture to Defeat DMA Attacks
Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only! Grab it Watch an 11-minute conference presentation from USENIX Security '24 exploring DMAAUTH, a novel hardware-software co-design architecture that provides enhanced protection against DMA attacks. Learn how researchers from Zhejiang University developed a lightweight solution that outperforms traditional IOMMU security measures through Arithmetic-capable Pointer AuthentiCation (APAC) technology. Discover the implementation details of this cross-architecture solution tested on FPGA hardware boards, ARM, and RISC-V emulators, demonstrating superior speed and security while maintaining transparency across devices, drivers, and IOMMU. Understand how DMAAUTH achieves byte-grained spatial protection and temporal protection through its innovative combination of APAC, per-mapping metadata, and a dedicated hardware Authenticator positioned on the bus to authenticate DMA transactions.