Facebook awards $100,000 prize for new code isolation technique

guest · Aug 19, 2019

Facebook awards $100,000 prize for new code isolation technique
August 20, 2019
https://www.zdnet.com/article/facebook-awards-100000-prize-for-new-code-isolation-technique/

Facebook has awarded a $100,000 prize to a team of academics from Germany for developing a new code isolation technique that can be used to safeguard sensitive data while it's being processed inside a computer.
The award is named the Internet Defense Prize [...]

The novelty of this technique is that ERIM does this with little performance overhead, making it ideal for deployment in real-world environments.
REAL-WORLD APPLICABILITY
According to the research team, ERIM tests have revealed performance overheads of under 1% for apps that need to make over 100,000 switches between CPU memory pages -- something that happens a lot in web servers.
Furthermore, ERIM also outperformed all other code isolation techniques, such as SFI MPX, VMFUNC, or LwC.
Click to expand...

"The authors' approach stands out because it achieves much better runtime efficiency due to lower overhead, which makes it practical for real-world use in production environments," said Pieter Hooimeijer, Engineering Manager at Facebook.

"If this type of defense finds widespread use, it will help eliminate an entire class of security exploits."
Click to expand...

White paper: "ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK)"
(PDF - 397 KB): https://www.usenix.org/system/files/sec19-vahldiek-oberwagner_0.pdf

Rasheed187 · Aug 24, 2019

I'm actually surprised that such a technique didn't already exist. At the moment it's quite easy for malware to access certain data stored in memory.

Log in or Sign up

Facebook awards $100,000 prize for new code isolation technique

guest Guest

Rasheed187 Registered Member

Log in or Sign up

Facebook awards $100,000 prize for new code isolation technique

guest Guest

Rasheed187 Registered Member

Useful Searches