Published:
At the beginning of my PhD I at first became interested in the broader area of cybersecurity, but my current line of research really got me into the area of systems security. In particular improving the cyber-resilience and availability low-level systems software against memory corruption attacks. This has required me to develop skills, such as in-depth knowledge of the C and Rust runtimes, as well as assembly programming.
Published:
The CrowdStrike outage shows that improving software resilience and availability is as important as detecting and mitigating memory-safety vulnerabilities.
Published:
I have been learning LLVM for a while; I added a function and variable attribute, new compiler options, wrote a hacky LLVM transformation pass, and deleted my hacky stuff in the backend! I kind of enjoyed it, kind of annoyed; in the end, I think it was good to learn!
Published:
To install the BSC compiler, follow these steps (example for Ubuntu):
Example for Ubuntu
wget https://github.com/B-Lang-org/bsc/releases/download/2023.07/bsc-2023.07-ubuntu-22.04.tar.gz
cd ~/cheri/bsc-2023.07-debian-12.1
export PATH="$PATH:/home/cheri/bsc-2023.07-ubuntu-22.04/bin/
It’s likely that you will also need the Bluespec library. It took me a long time to understand what was missing. You need to install this library from the following repository:
https://github.com/B-Lang-org/bsc-contrib/tree/main
Published:
Adversarial Examples: A great starting point! These exercises will introduce you to the concept of capabilities and how they can be used to protect against various security threats.
Published:
Besspin-GFE notes
Add to path e.g., export PATH="$PATH:/bsc-2023.07-debian-12.1/bin/ to ~/.bashrc and source it
Follow the https://github.com/gulmezmerve/BESSPIN-GFE?tab=readme-ov-file#update-dependencies
BESSPIN GPE: https://github.com/CTSRD-CHERI/BESSPIN-GFE has Toooba as a submodule https://github.com/CTSRD-CHERI/BESSPIN-GFE/tree/cambridge/bluespec-processors/P3. But it is not updated as a submodule. Please get the updated the version..
src_SSITH_P3/
make clean
make
make compile
cd $GFE_REPO
./setup_soc_project.sh bluespec_p3
./build.sh bluespec_p3
~/BESSPIN-GFE/vivado/soc_bluespec_p3/soc_bluespec_p3.runs/impl_1/design_1_utilization_placed.rpt
- ./pytest_processor.py bluespec_p3
Open GDB:
riscv64-unknown-elf-gdb -x bootmem/startup.gdb /home/merve/BESSPIN-GFE/mon_cheri_binaries_malloc/coremark_P2-riscv-bare-metal-CHERI\:0-MONCHERI-0LLVM.elf
oi
To OpenOCD
- openocd -f testing/targets/ssith_gfe.cfg
cd BESSPIN-GFE/verilator_simulators/run
cd ..
make simulator PROC=bluespec_p2
cd run
make run_example PROC=bluespec_p2 EXAMPLE=/home/merve/coremark_wbr.elf VERBOSITY=+v4
To get the output from terminal
socat stdin,raw,echo=0 /dev/ttyUSB2,raw,echo=0
Published:
I worked on macro expansion on Rust for that project: https://arxiv.org/pdf/2306.08127
Published:
I am studying on low-level security.