paperbot · PL 论文追踪

全部论文 待读 收藏

P2 CHERI-SIMT: Implementing Capability Memory Protection in GPUs

CHERI-SIMT:在 GPU 中实现能力内存保护
ASPLOS Proceedings of the 31st ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 12025匹配度 2/10 · 论文研究在 GPU SIMT 核中实现 CHERI 能力内存保护,属于体系结构与硬件安全方向;用户核心关注静态分析、LLM/Agent、浮点程序分析与贝叶斯程序分析,本文均未涉及,仅有 PL/体系结构交叉的边缘关联。引用 1 inbox
Matthew Naylor, Alexandre Joannou, A. Theodore Markettos, Paul Metzger, Simon W. Moore, Timothy M. Jones
crossref: 2026-09-12dblp: 2026-09-12

AI 速览

一句话:评估在 GPU SIMT 核中集成 CHERI 能力内存保护的可行性,并提出显著降低寄存器、面积与执行开销的技术。

各国政府日益建议软件厂商采用内存安全语言与技术以抵御攻击,这给提供 CUDA/OpenCL 等不安全 C/C++ 编程环境的 GPU 厂商带来压力。CHERI 是一种被推荐的能力硬件增强内存安全技术,但将其引入 GPU 架构的可行性尚不明确。本文扩展一个开源、可综合的 SIMT 核及其类 CUDA 编程环境以支持 CHERI,并针对 SIMT 设计提出多项降低开销的技术。实验表明,寄存器文件存储开销从 103% 降至 7%,逻辑面积开销降低 44%,约等于每条向量通道增加一个乘法器的成本,执行时间开销降至 1.6%。这说明 CHERI 可为 GPU 提供可行且高效的内存安全路径,同时避免替换既有编程实践。

问题
GPU 厂商普遍通过 CUDA/OpenCL 暴露不安全的 C/C++ 编程接口,而政府与业界建议采用内存安全技术,因此需要评估 CHERI 能力内存保护能否引入 GPU 架构。
方法
作者扩展一个开源、可综合的 SIMT 核和类 CUDA 编程环境,使其支持 CHERI,并提出面向 SIMT 设计的多项技术以缓解能力存储、逻辑面积和执行开销。
评估
通过原型实现与开销测量,比较引入 CHERI 后的寄存器文件存储、逻辑面积和执行时间开销,并给出优化前后的数据。
原文摘要(Abstract)

Governments are increasingly advising software manufacturers to employ memory-safe languages and technologies to combat adversarial attacks on modern computing infrastructure. This introduces pressures across the entire computing industry, including GPU vendors who provide implementations of unsafe C/C++-based languages, such as CUDA and OpenCL, for programming the devices they produce. One of the memory-safety technologies being recommended is Capability Hardware Enhanced RISC Instructions (CHERI). CHERI builds strong and efficient memory safety into underlying instruction-set architectures allowing continued, but memory-safe, use of C/C++-based languages on top. In this paper, we evaluate the feasibility of incorporating CHERI into GPU architectures by extending a prototype, open-source, synthesisable, SIMT core and CUDA-like programming environment with support for CHERI. We present techniques to considerably ameliorate the costs of CHERI in SIMT designs, reducing register-file storage overheads from 103% to 7%, logic-area overheads by 44% to a cost comparable to one additional multiplier per vector lane, and execution-time overheads to 1.6%. With the proposed techniques, CHERI offers a viable path to strong and efficient GPU memory safety, while avoiding the need to replace established programming practices.

链接与引用

DOI 原文 · PDF(开放获取) · DBLP

BibTeX
@inproceedings{NaylorJMMM026,
  title = {CHERI-SIMT: Implementing Capability Memory Protection in GPUs},
  author = {Matthew Naylor and Alexandre Joannou and A. Theodore Markettos and Paul Metzger and Simon W. Moore and Timothy M. Jones},
  booktitle = {ASPLOS},
  year = {2025},
  doi = {10.1145/3760250.3762234}
}