一句话:提出 XRust 以保障 unsafe Rust 程序的内存安全,弥补其绕过类型系统带来的安全风险。
Rust 旨在同时提供高级内存安全与底层资源操作能力,但 unsafe Rust 为支持底层操作而绕过类型系统,形成严重安全缺口。近年来 Rust 标准库中已发现多起真实内存破坏漏洞,表明 unsafe 代码的安全问题不容忽视。本文提出 XRust,目标是在保留 unsafe Rust 底层能力的同时加固其内存安全,防止内存破坏。摘要未详述具体机制与实验评估,但问题定位明确:需为绕过类型系统的 unsafe Rust 提供额外安全保障。
Rust is a promising systems programming language that embraces both high-level memory safety and low-level resource manipulation. However, the dark side of Rust, unsafe Rust, leaves a large security hole as it bypasses the Rust type system in order to support low-level operations. Recently, several real-world memory corruption vulnerabilities have been discovered in Rust's standard libraries.
DOI 原文 ·
@inproceedings{paperbot5571,
title = {Securing unsafe rust programs with XRust},
author = {Peiming Liu and Gang Zhao and Jeff Huang},
booktitle = {ICSE},
year = {2020},
doi = {10.1145/3377811.3380325}
}