Link-time smart card code hardening

This paper presents a feasibility study to protect smart card software against fault-injection attacks by means of link-time code rewriting. This approach avoids the drawbacks of source code hardening, avoids the need for manual assembly writing, and is applicable in conjunction with closed third-party compilers. We implemented a range of cookbook code hardening recipes in a prototype link-time rewriter and evaluate their coverage and associated overhead to conclude that this approach is promising. We demonstrate that the overhead of using an automated link-time approach is not significantly higher than what can be obtained with compile-time hardening or with manual hardening of compiler-generated assembly code

SCM : Secure Code Memory Architecture

An increasing number of applications implemented on a SoC (System-on-chip) require security features. This work addresses the issue of protecting the integrity of code and read-only data that is stored in memory. To this end, we propose a new architecture called SCM, which works as a standalone IP core in a SoC. To the best of our knowledge, there exist no architectural elements similar to SCM that offer the same strict security guarantees while, at the same time, not requiring any modifications to other IP cores in its SoC design. In addition, SCM has the flexibility to select the parts of the software to be protected, which eases the integration of our solution with existing software. The evaluation of SCM was done on the Zynq platform which features an ARM processor and an FPGA. The design was evaluated by executing a number of different benchmarks from memory protected by SCM, and we found that it introduces minimal overhead to the system

SOFIA : software and control flow integrity architecture

Microprocessors used in safety-critical systems are extremely sensitive to software vulnerabilities, as their failure can lead to injury, damage to equipment, or environmental catastrophe. This paper proposes a hardware-based security architecture for microprocessors used in safety-critical systems. The proposed architecture provides protection against code injection and code reuse attacks. It has mechanisms to protect software integrity, perform control flow integrity, prevent execution of tampered code, and enforce copyright protection. We are the first to propose a mechanism to enforce control flow integrity at the finest possible granularity. The proposed architectural features were added to the LEON3 open source soft microprocessor, and were evaluated on an FPGA running a software benchmark. The results show that the hardware area is 28.2% larger and the clock is 84.6% slower, while the software benchmark has a cycle overhead of 13.7% and a total execution time overhead of 110% when compared to an unmodified processor

Effect of aliskiren on post-discharge outcomes among diabetic and non-diabetic patients hospitalized for heart failure: insights from the ASTRONAUT trial

Aims The objective of the Aliskiren Trial on Acute Heart Failure Outcomes (ASTRONAUT) was to determine whether aliskiren, a direct renin inhibitor, would improve post-discharge outcomes in patients with hospitalization for heart failure (HHF) with reduced ejection fraction. Pre-specified subgroup analyses suggested potential heterogeneity in post-discharge outcomes with aliskiren in patients with and without baseline diabetes mellitus (DM). Methods and results ASTRONAUT included 953 patients without DM (aliskiren 489; placebo 464) and 662 patients with DM (aliskiren 319; placebo 343) (as reported by study investigators). Study endpoints included the first occurrence of cardiovascular death or HHF within 6 and 12 months, all-cause death within 6 and 12 months, and change from baseline in N-terminal pro-B-type natriuretic peptide (NT-proBNP) at 1, 6, and 12 months. Data regarding risk of hyperkalaemia, renal impairment, and hypotension, and changes in additional serum biomarkers were collected. The effect of aliskiren on cardiovascular death or HHF within 6 months (primary endpoint) did not significantly differ by baseline DM status (P = 0.08 for interaction), but reached statistical significance at 12 months (non-DM: HR: 0.80, 95% CI: 0.64-0.99; DM: HR: 1.16, 95% CI: 0.91-1.47; P = 0.03 for interaction). Risk of 12-month all-cause death with aliskiren significantly differed by the presence of baseline DM (non-DM: HR: 0.69, 95% CI: 0.50-0.94; DM: HR: 1.64, 95% CI: 1.15-2.33; P < 0.01 for interaction). Among non-diabetics, aliskiren significantly reduced NT-proBNP through 6 months and plasma troponin I and aldosterone through 12 months, as compared to placebo. Among diabetic patients, aliskiren reduced plasma troponin I and aldosterone relative to placebo through 1 month only. There was a trend towards differing risk of post-baseline potassium ≥6 mmol/L with aliskiren by underlying DM status (non-DM: HR: 1.17, 95% CI: 0.71-1.93; DM: HR: 2.39, 95% CI: 1.30-4.42; P = 0.07 for interaction). Conclusion This pre-specified subgroup analysis from the ASTRONAUT trial generates the hypothesis that the addition of aliskiren to standard HHF therapy in non-diabetic patients is generally well-tolerated and improves post-discharge outcomes and biomarker profiles. In contrast, diabetic patients receiving aliskiren appear to have worse post-discharge outcomes. Future prospective investigations are needed to confirm potential benefits of renin inhibition in a large cohort of HHF patients without D