Work

Zero-Day Hardware-Supported Malware Detection of Stack Buffer Overflow Attacks: An Application Exploiting the CV32e40p RISC-V Core

Year: 2025

Type: conference-paper

Abstract: The RISC-V architecture has become increasingly popular due to its open-source nature and flexibility, making it susceptible to various security attacks, such as Stack Buffer Overflow (SBO) attacks. It is crucial to effectively detect these attacks to ensure the security of RISC-V systems. This study explores Hardware-Supported Malware Detection (HMD) techniques for identifying these security threats. Using the CV32e40p RISC-V platform, we conducted simulations to assess the effectiveness of anomaly-based HMD methods in detecting SBO attacks by analyzing hardware microarchitectural events. The findings demonstrate the potential of these approaches but also reveal significant challenges in detection performance. These elements are essential for advancing the security capabilities of HMD systems in RISC-V environments.

Source: IEEE Latin American Test Symposium (LATS)

DOI: 10.1109/lats65346.2025.10963939

Authors: Cristiano Pegoraro Chenet, Alessandro Savino, Stefano Di Carlo

Institution: Politecnico di Torino

Language: English

Topic: Security and Verification in Computing

Subfield: Artificial Intelligence

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

Funders: European Commission, NextGenerationEU, European Health and Digital Executive Agency

Awards: G3822624842, Virtual Environment and Tool-boxing for Trustworthy Development of RISC-V based Cloud Services, G507880695