20.500.12556/RUL-176723 Preverjanje celovitosti kontrolnega pretoka Verification of control-flow integrity Magistrska naloga obravnava zagotavljanje celovitosti kontrolnega toka programov. Napadi, kot je vrnitveno usmerjeno programiranje, izkoriščajo pomnilniške ranljivosti in napadalcu omogočajo prevzem nadzora nad izvajanjem programa. V nalogi razvijemo sistem za preverjanje, s katerim ugotovimo, ali se je program izvedel tako, kot je bil načrtovan. Predelamo simulator Spike za arhitekturo RISC-V, da omogoča spremljanje programa med izvajanjem. Pri tem beležimo vsako spremembo kontrolnega toka z veriženjem zgoščenih vrednosti, s čimer na koncu ustvarimo atest o izvajanju. Možne poti programa določimo s statično analizo, pri kateri iz strojne kode programa zgradimo graf kontrolnega toka in ga analiziramo. Tako pridobimo vse možne poti programa in njihove ustrezne zgoščene vrednosti. Atest preverimo s pričakovanimi vrednostmi in ugotovimo morebitno kršitev celovitosti. Sistem smo preverili z naborom programov in izvedbo napada z vrnitveno usmerjenim programiranjem nad ranljivim programom, ki ga sistem pravilno zazna. The master's thesis addresses the assurance of control flow integrity in programs. Attacks such as return-oriented programming exploit memory vulnerabilities, allowing an attacker to hijack a program's execution. We developed a verification system to determine whether a program has executed as intended. We modified the Spike simulator for the RISC-V architecture to enable program execution monitoring. This involves logging every control flow change by chaining hash values, ultimately generating an execution claim. The program's possible paths are determined through static analysis, where we construct and analyse a control flow graph from the program's machine code. This process yields all possible program paths and their corresponding hash values. The claim is then verified against the expected values to detect any potential integrity violations. We evaluated the system using a set of programs and by performing a return-oriented programming attack on a vulnerable program. The system correctly detected the attack. kontrolni tok graf kontrolnega toka celovitost kontrolnega toka atestiranje kontrolnega toka vrnitveno usmerjeno programiranje control flow control flow graph control flow integrity control flow attestation return-oriented programming true false false Slovenski jezik Angleški jezik Magistrsko delo/naloga 2025-12-10 10:50:02 2025-12-10 10:50:12 2025-12-24 03:57:22 0000-00-00 00:00:00 2025 0 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 37867 262684675 Strosar_grmek_Loris_-_Preverjanje_celovitosti_kontrolnega_pretoka.pdf Strosar_grmek_Loris_-_Preverjanje_celovitosti_kontrolnega_pretoka.pdf 1 C38C58F4A2A3366600051A5D1331897F 10fcba0aaea4215235277ba28618cbd9924d1cb3ea3363ac113c5a0a9c079fc8 35ff2f9e-d5ad-11f0-9328-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=223253 Fakulteta za računalništvo in informatiko 0 0 0